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Description 

BACKGROUND OF THE INVENTION 

[0001] The present invention relates to an information 
processing apparatus, an information recording medi- 
um, an information processing method, and a computer 
program. Embodiments relate to an information 
processing apparatus, an information recording medi- 
um, an information processing method, and a computer 
program for realizing the storage of various contents 
that require contents usage management and the usage 
management of contents for each of finely segmental- 
ized data units. 

[0002] Various software data including audio data 
such as music data, image data such as movie data, 
game programs, various application programs (herein- 
after referred to as "contents") can be stored as digital 
data on various recording mediums, e.g., Blu-ray discs 
using blue laser, DVDs (Digital Versatile Discs), MDs 
(Mini Discs), and CDs (Compact Discs). In particular, 
Blu-ray discs are discs capable of storing data in highly 
packed density, and can record a large amount of video 
contents or the like as data of high image quality. 
[0003] Digital contents are stored in such various in- 
formation recording mediums and provided to users. 
Users play and use the contents recorded in such infor- 
mation recording mediums on their playback units such 
as PCs (Personal Computers), disc players, etc. 
[0004] Many contents including music data, image 
data, etc. are generally protected under distribution 
rights owned by their producers or sellers. It is custom- 
ary to pose certain limitations on the distribution of those 
contents, i.e., to allow only normal users to use contents 
and inhibit unauthorized duplication, etc. 
[0005] Digital recording devices and recording medi- 
ums are capable of repeatedly recording and reproduc- 
ing digital contents without deteriorating image and au- 
dio data. They tend to give rise to such problems as the 
delivery of unauthorized copy contents via the Internet, 
the distribution of pirate discs such as CD-R with copied 
contents, and the widespread use of copy contents 
stored in the hard discs of PCs or the like. 
[0006] Large-capacity recording mediums such as 
DVDs or recording mediums using blue laser that has 
been developed in recent years allow a large amount of 
data, e.g., data of one or several movies, as digital in- 
formation on a single medium. In view of the ability to 
record video information as digital information, it is of 
growing importance to prevent unauthorized copying to 
protect copyright holders. Recent years have seen dig- 
ital recording devices and recording medium that incor- 
porate various techniques of preventing digital data from 
being copied unlawfully. 

[0007] For example, DVD players employ a content 
scrambling system. According to the content scrambling 
system, video data and audio data are encrypted and 
recorded on a DVD-ROM (Read-Only Memory), and a 



key for decrypting the encrypted data is given to a li- 
censed DVD player. The license is given to those DVD 
players that are designed to comply with certain opera- 
tion rules against unauthorized copying. The licensed 
5 DVD player uses the given key to decrypt the encrypted 
data recorded on the DVD-ROM forthereby reproducing 
images and sounds from the DVD-ROM. 
[0008] An unlicensed DVD player, on the other hand, 
is incapable of decrypting the encrypted data recorded 
10 on the DVD-ROM as it has not have the key to decrypt 
the encrypted data. According to the content scrambling 
system , therefore, any DVD players that do not meet the 
requirements for the license cannot play back 
DVD-ROM with recorded digital data, thus preventing 
15 unauthorized duplication. 

[0009] With the recent widespread use of data com- 
munication networks, so-called home networks are be- 
ginning to find use at home for networking home electric 
appliances, computers, and other peripherals to allow 
20 communications therebetween. Home networks give 
users convenience and comfort by allowing networked 
devices to communicate with each other thereby to 
share data processing functions of the devices and also 
to send and receive contents between the devices, and 
25 are expected to find increasing use in the future. 

[0010] As such networked environments become 
more popular, there are more opportunities for the con- 
tents stored in information recording mediums to be ac- 
cessed and used by devices that are connected to home 
30 networks. The above conventional unauthorized copy 
prevention system is based on the concept that the play- 
back of contents is allowed on only one licensed player. 
Therefore, no sufficient consideration has been given to 
the situation where a networked device loaded with a 
35 recording medium, e.g., a home server or a player, is 
accessed by another networked device, e.g., a PC, a 
TV set, or the like, to play backthe contents through the 
network. 

[0011] Heretofore, since it has been the mainstream 
40 to use one content stored on a recording medium with 
a single player, it has been sufficient for performing the 
usage management of contents by establishing con- 
tents access rights such as a license for the contents or 
the player. At present, however, information recording 
45 mediums of larger capacity and home-use digital and 
networked devices in wider use require contents usage 
management arrangements different from those in the 
past. Specifically, there are demands, to be described 
below, for new contents usage management arrange- 
50 ments. 

(1) The realization of arrangements for recording a 
plurality of contents on a recording medium and per- 
forming different usage management for each con- 

55 tent. 

(2) The realization of contents usage management 
arrangements for allowing contents to be used in a 
certain network such as a home network, or specif- 
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ically allowing contents to be played back by a net- 
work-connected device and to be copied by a home 
server. 

(3) The realization of arrangements for distributing 
information required to play back contents via a net- 
work, e.g., a key applied to decrypt contents, safety 
to a particular user. 

[0012] It has been desired to realize the arrange- 
ments described above in (1) through (3). 

SUMMARY OF THE INVENTION 

[001 3] Embodiments of the present invention seek to 
provide an information processing apparatus, an infor- 
mation recording medium, an information processing 
method, and a computer program for realizing the cop- 
yright management and usage management of each of 
finely segmentalized data units of contents stored on an 
information recording medium in the use of various con- 
tents stored in the information recording medium which 
require usage management such as copyright manage- 
ment. 

[001 4] Embodiments of the present invention seek to 
provide an information processing apparatus, an infor- 
mation recording medium, an information processing 
method, and a computer program for converting con- 
tents usage control information corresponding to con- 
tents allotted to contents management units into en- 
crypted data with unit keys corresponding to the con- 
tents management units, and setting and recording fal- 
sification verification data corresponding to data includ- 
ing the contents usage control information, for thereby 
realizing contents usage management at a higher secu- 
rity level. 

[001 5] According to a first aspect of the present inven- 
tion, there is provided an information recording medium, 
storing: 

main contents having constituent data according to 
a predetermined format and subcontents having 
constituent data not according to the predetermined 
format, as recorded data; 

the main contents and the subcontents having con- 
stituent data established as contents management 
units; 

the contents management units including data 
stored as encrypted data based on individual unit 
keys associated respectively with the contents 
management units. 

[0016] In the information recording medium, the pre- 
determined formatmaybe a Blu-raydisc ROM format, 
and the main contents include recorded data having a 
layered data arrangement according to the Blu-ray disc 
ROM format. 

[0017] In the information recording medium, the sub- 
contents may include a set of data groups including at 



least one data file, the contents management units be- 
ing established as units of the data groups, the informa- 
tion recording medium storing path identification infor- 
mation of the files of the data groups corresponding to 
5 the contents management units, as data group manage- 
ment information. 

[0018] In the information recording medium, the sub- 
contents may include a set of data groups including at 
least one data file, the contents management units be- 

10 ing established as units of the data groups, the informa- 
tion recording medium having a directory arrangement 
with the data groups established as individual folders. 
[0019] The information recording medium may store 
identification information of the individual folders of the 

15 data groups corresponding to the contents manage- 
ment units, as the data group management information. 
[0020] The information recording medium may store 
contents usage control information corresponding to the 
contents management units, as the encrypted data 

20 based on the unit keys associated respectively with the 
contents management units. 

[0021] The information recording medium may store 
contents usage control information corresponding to the 
contents management units, as data having a falsifica- 

25 tion prevention arrangement. 

[0022] The information recording medium may store 
contents usage control information corresponding to the 
contents management units and data associated with 
hash values based on the contents usage control infor- 

30 mation, as the encrypted data based on the unit keys 
associated respectively with the contents management 
units. 

[0023] The information recording medium may store 
repetitive data of contents usage control information 

35 corresponding to the contents management units, as 
the encrypted data based on the unit keys associated 
respectively with the contents management units. 
[0024] The information recording medium may store 
first playback contents as contents reproduced when 

40 the information recording medium is loaded in a drive, 
the first playback contents being established as con- 
tents management units, the contents management 
units including data stored as the encrypted data based 
on the individual unit keys associated respectively with 

45 the contents management units. 

[0025] The information recording medium may store 
top menu contents as contents reproduced when a 
menu display function is performed, the top menu con- 
tents being established as contents management units, 

50 the contents management units including data stored as 
the encrypted data based on the individual unit keys as- 
sociated respectively with the contents management 
units. 

[0026] The information recording medium may further 
55 store a data file defining information representative of 
association between the contents management units 
and indexes, and random number information for gen- 
erating the unit keys. 
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[0027] According to a second aspect of the present 
invention, there is provided an information processing 
apparatus, including: 

a management unit setting section for establishing 
constituent data of main contents according to a 
predetermined format and subcontents not accord- 
ing to the predetermined format, as contents man- 
agement units; and 

a recording section for recording data included in 
the contents management units in an information 
recording medium as encrypted data based on in- 
dividual unit keys associated respectively with the 
contents management units. 

[0028] In the information processing apparatus, the 
predetermined format maybe a Blu-ray disc ROM for- 
mat, and the recording section stores the main contents 
in the information recording medium as recorded data 
having a layered data arrangement according to the Blu- 
ray disc ROM format. 

[0029] In the information processing apparatus, the 
management unit setting section may establish the con- 
tents management units in association with a set of data 
groups including at least one data file included in the 
subcontents, and the recording section records path 
identification information of the files of the data groups 
corresponding to the contents management units, in the 
information recording medium as data group manage- 
ment information. 

[0030] In the information processing apparatus, the 
management unit setting section may establish the con- 
tents management units in association with a set of data 
groups including at least one data file included in the 
subcontents, and the recording section records the at 
least one data file included in the subcontents in the in- 
formation recording medium based on a directory ar- 
rangement with the data groups established as individ- 
ual folders. 

[0031] In the information processing apparatus, the 
recording section may record identification information 
of the individual folders of the data groups correspond- 
ing to the contents management units, in the information 
recording medium as the data group management infor- 
mation. 

[0032] In the information processing apparatus, the 
recording section may record contents usage control in- 
formation corresponding to the contents management 
units, in the information recording medium as the en- 
crypted data based on the unit keys associated respec- 
tively with the contents management units. 
[0033] In the information processing apparatus, the 
recording section may record contents usage control in- 
formation corresponding to the contents management 
units, in the information recording medium as data hav- 
ing a falsification prevention arrangement. 
[0034] In the information processing apparatus, the 
recording section may encrypt contents usage control 



information corresponding to the contents management 
units and data associated with hash values based on 
the contents usage control information, based on the 
unit keys associated respectively with the contents man- 
5 agement units, and records the encrypted contents us- 
age control information and the encrypted data in the 
information recording medium. 

[0035] In the information processing apparatus, the 
recording section may encrypt repetitive data of con- 

10 tents usage control information corresponding to the 
contents management units, based on the unit keys as- 
sociated respectively with the contents management 
units, and records the encrypted repetitive data in the 
information recording medium. 

15 [0036] In the information processing apparatus, the 
management unit setting section may establish first 
playback contents as contents reproduced when the in- 
formation recording medium is loaded in a drive, as con- 
tents management units, and the recording section 

20 records data included in the contents management units 
as the encrypted data based on the individual unit keys 
associated respectively with the contents management 
units. 

[0037] In the information processing apparatus, the 
25 management unit setting section may establish top 
menu contents as contents reproduced when a menu 
display function is performed, as contents management 
units, and the recording section records data included 
in the contents management units as the encrypted data 
30 based on the individual unit keys associated respective- 
ly with the contents management units. 
[0038] In the information processing apparatus, the 
recording section may further record a data file defining 
information representative of association between the 
35 contents management units and indexes, and random 
number information for generating the unit keys. 
[0039] According to a third aspect of the present in- 
vention, there is provided an information processing ap- 
paratus for reproducing usage management contents, 
40 including: 

an acquiring section for acquiring encrypted con- 
tents usage control information corresponding to 
contents management units stored in an informa- 
45 tion recording medium; and 

a decrypting and verifying section for decrypting 
and verifying, for falsification, the contents by ap- 
plying unit keys established in association with the 
contents management units, and using the contents 
50 based on the contents usage control information if 
no falsification is confirmed. 

[0040] According to a fourth aspect of the present in- 
vention, there is provided an information processing 
55 method, including the steps of: 

establishing constituent data of main contents ac- 
cording to a predetermined format and subcontents 
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having not according to the predetermined format, 
as contents management units; and 
storing data included in the contents management 
units in an information recording medium as en- 
crypted data based on individual unit keys associ- 
ated respectively with the contents management 
units. 

[0041] In the information processing method, the pre- 
determined format may be a Blu-ray disc ROM format, 
and the data storing step including the step of storing 
the main contents in the information recording medium 
as recorded data having a layered data arrangement ac- 
cording to the Blu-ray disc ROM format. 
[0042] The information processing method may fur- 
ther include the steps of: 



sponding to the contents management units, in the 
information recording medium as data having a fal- 
sification prevention arrangement. 

5 [0047] The information processing method may fur- 
ther include the steps of: 

encrypt contents usage control information corre- 
sponding to the contents management units and 
10 data associated with hash values based on the con- 
tents usage control information, based on the unit 
keys associated respectively with the contents 
management units; and 

storing the encrypted contents usage control infor- 
ms mation and the encrypted data in the information re- 
cording medium. 



establishing the contents management units in as- 
sociation with a set of data groups including at least 
one data file included in the subcontents; and 
storing path identification information of the files of 
the data groups corresponding to the contents man- 
agement units, in the information recording medium 
as data group management information. 

[0043] The information processing method may fur- 
ther include the steps of: 



[0048] The information processing method may fur- 
ther include the steps of encrypting repetitive data of 
20 contents usage control information corresponding to the 
contents management units, based on the unit keys as- 
sociated respectively with the contents management 
units; and 

storing the encrypted repetitive data in the infor- 
ms mation recording medium. 

[0049] The information processing method may fur- 
ther include the steps of: 



establishing the contents management units in as- 
sociation with a set of data groups including at least 
one data file included in the subcontents; and 
storing the at least one data file included in the sub- 
contents in the information recording medium 
based on a directory arrangement with the data 
groups established as individual folders. 

[0044] The information processing method may fur- 
ther include the step of: 

storing identification information of the individual 
folders of the data groups corresponding to the con- 
tents management units, in the information record- 
ing medium as the data group management infor- 
mation. 

[0045] The information processing method may fur- 
ther include the step of: 



30 



35 



40 



45 



establishing first playback contents as contents re- 
produced when the information recording medium 
is loaded in a drive, as contents management units; 
and 

storing data included in the contents management 
units as the encrypted data based on the individual 
unit keys associated respectively with the contents 
management units. 

[0050] The information processing method may fur- 
ther include the steps of: 

establishing top menu contents as contents repro- 
duced when a menu display function is performed, 
as contents management units; and 
storing data included in the contents management 
units as the encrypted data based on the individual 
unit keys associated respectively with the contents 
management units. 



storing contents usage control information corre- 
sponding to the contents management units, in the 
information recording medium as the encrypted da- 
ta based on the unit keys associated respectively 
with the contents management units. 

[0046] The information processing method may fur- 
ther include the step of: 

storing contents usage control information corre- 



[0051] The information processing method may fur- 
so ther include the step of: 

further storing a data file defining information rep- 
resentative of association between the contents 
management units and indexes, and random 
55 number information for generating the unit keys. 

[0052] According to a fifth aspect of the present inven- 
tion, there is provided an information processing method 
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of reproducing usage management contents, including 
the steps of: 

acquiring encrypted contents usage control infor- 
mation corresponding to contents management 
units stored in an information recording medium; 
decrypting and verifying, for falsification, the con- 
tents by applying unit keys established in associa- 
tion with the contents management units; and 
using the contents based on the contents usage 
control information if no falsification is confirmed. 

[0053] According to a sixth aspect of the present in- 
vention, there is provided a computer program for re- 
cording usage management contents, including the 
steps of: 

establishing constituent data of main contents ac- 
cording to a predetermined format and subcontents 
not according to the predetermined format, as con- 
tents management units; and 
storing data included in the contents management 
units in an information recording medium as en- 
crypted data based on individual unit keys associ- 
ated respectively with the contents management 
units. 

[0054] According to a seventh aspect of the present 
invention, there is provided a computer program for re- 
producing usage management contents, including the 
steps of: 

acquiring encrypted contents usage control infor- 
mation corresponding to contents management 
units stored in an information recording medium; 
and 

decrypting and verifying, for falsification, the con- 
tents by applying unit keys established in associa- 
tion with contents management units; and 
using the contents based on the encrypted contents 
usage control information corresponding if no falsi- 
fication is confirmed. 

[0055] According to an eighth aspect of the present 
invention, there is provided an information recording 
medium storing: 

at least one contents divided into contents manage- 
ment units and containing encrypted data based on 
unit keys established respectively in association 
with the contents management units; and 
contents usage control information established re- 
spectively in association with the contents manage- 
ment units; 

the contents usage control information being stored 
as encrypted data according to an encryption proc- 
ess applying the unit keys established respectively 
in association with the contents management units, 



with falsification verification data added thereto. 

[0056] In the information recording medium, the con- 
tents usage control information may be encrypted in 
5 blocks each having a predetermined amount of data, 
and stored as block seeds including data of the respec- 
tive blocks and encrypted block data encrypted based 
on a block key generated by an encryption process ap- 
plying the unit keys. 
10 [0057] In the information recording medium, the block 
seeds may include block data which do not serve as the 
contents usage control information. 
[0058] In the information recording medium, the con- 
tents usage control information may include data includ- 
es jng control information in different categories represent- 
ing basic control information and extended control infor- 
mation, the basic control information being stored in one 
block, with falsification verification data for data of the 
block storing the basic control information being stored 
20 in the same block. 

[0059] In the information recording medium, the con- 
tents usage control information may include data includ- 
ing control information in different categories represent- 
ing basic control information and extended control infor- 
ms mation , the basic control information being stored in one 
block, with first falsification verification data for data of 
the block storing the basic control information being 
stored in the same block, the information recording me- 
dium storing second falsification verification data for all 
30 data of the basic control information and the extended 
control information. 

[0060] According to a ninth aspect of the present in- 
vention, there is provided an information processing ap- 
paratus for reproducing usage management contents, 
35 including: 

an acquiring section for acquiring contents usage 
control information corresponding to contents man- 
agement units stored in an information recording 
40 medium; 

a decrypting section for decrypting blocks of block 
data each having a predetermined amount of data 
and serving as the contents usage control informa- 
tion by applying unit keys established in association 
45 with the contents management units, and verifying, 
for falsification, the blocks based on falsification 
verification data included in the block data; and 
a using section for using the contents based on the 
decrypted contents usage control information if no 
50 falsification is confirmed. 

[0061] In the information processing apparatus, the 
acquiring section may acquire block seeds from the 
blocks of the contents usage control information, and 
55 the decrypting section decrypts the blocks based on a 
block key generated by an encryption process applying 
the block seeds and the unit keys. 
[0062] The information processing apparatus may 
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further include a selection section for selecting only one 
blockdata including basiccontrol information from a plu- 
rality of block data of the contents usage control infor- 
mation, wherein the decrypting section decrypts the se- 
lected blockdata including the basic control information, 
and verifies, for falsification, the block data based on 
falsification verification data included in the block data, 
and the using section uses the contents based on the 
decrypted contents usage control information if no fal- 
sification is confirmed. 

[0063] The information processing apparatus may 
further include a selecting section for selecting a plural- 
ity of block data including basic control information and 
extended control information from a plurality of block da- 
ta of the contents usagecontrol information, wherein the 
decrypting section decrypts blocks of the selected block 
data, and verifies, for falsification, the block data based 
on falsification verification data, and the using section 
uses the contents based on the decrypted contents us- 
age control information if no falsification is confirmed. 
[0064] According to a tenth aspect of the present in- 
vention, there is provided an information processing ap- 
paratusfor recording usage management contents in an 
information recording medium, including: 

a generating section for generating falsification ver- 
ification data for contents usagecontrol information 
corresponding to contents management units es- 
tablished for individual usage management control; 
an encrypting section for encrypting the contents by 
applying unit keys established respectively in asso- 
ciation with the contents management units to gen- 
erate encrypted data; and 

a generating and recording section for generating 
and recording encrypted contents usage control in- 
formation including the falsification verification da- 
ta. 

[0065] The information processing apparatus may 
further include: 



[0067] The information processing apparatus may 
further include: 

a dividing section for dividing the contents usage 
5 control information in different categories repre- 
senting basic control information and extended con- 
trol information; 

a storing section for storing the basic control infor- 
mation in one block; 
10 a generating section for generating falsification ver- 
ification data for data of the block storing the basic 
control information; 

a recording section for recording the falsification 
verification data in the same block. 

15 

[0068] The information processing apparatus may 
further include: 

a dividing section for dividing the contents usage 
20 control information in different categories repre- 
senting basic control information and extended con- 
trol information; 

a storing section for storing the basic control infor- 
mation in one block; 
25 a generating section for generating first falsification 
verification data for data of the block storing the ba- 
sic control information; 

a recording section for recording the falsification 
verification data in the same block; 
30 a generating section for generating second falsifi- 
cation verification data for all data of the basic con- 
trol information and the extended control informa- 
tion; and 

a recording section for recording the second falsifi- 
es cation verification data. 

[0069] According to an eleventh aspect of the present 
invention, there is provided an information processing 
method of reproducing usage management contents, 
40 including the steps of: 



acquiring contents usage control information corre- 
sponding to contents management units stored in 
an information recording medium; 

45 decrypting blocks of block data each having a pre- 
determined amount of data and serving as the con- 
tents usage control information by applying unit 
keys established in association with the contents 
management units; 

50 verifying, for falsification, the blocks based on falsi- 
fication verification data included in the block data; 
and 

using the contents based on the decrypted contents 
usage control information if no falsification is con- 
55 firmed. 



a dividing section for dividing the contents usage 
control information into blocks each having a pre- 
determined amount data; 

a generating section for generating a block key ac- 
cording to an encryption process applying block 
seeds extracted from constituent data of the blocks 
and the unit keys, and generating encrypted block 
data based on the block key; and 
a recording section for recording the encrypted 
block data in the information recording medium. 

[0066] The information processing apparatus may 
further include: 

an extracting section for extracting the block seeds 
from block arrangement date which do not serve as 
the contents usage control information. 



[0070] In the information processing method, the de- 
crypting step may include the steps of: 
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acquiring block seeds from the blocks of the con- 
tents usage control information, and decrypting the 
blocks based on a block key generated by an en- 
cryption process applying the block seeds and the 
unit keys. 5 

[0071] The information processing method may fur- 
ther include the steps of: 

selecting only one blockdata including basic control 10 
information from a plurality of block data of the con- 
tents usage control information; 
decrypting the selected block data including the ba- 
sic control information; 

verifying, for falsification, the block data based on is 
falsification verification data included in the block 
data; and 

using the contents based on the decrypted contents 
usage control information if no falsification is con- 
firmed. 20 

[0072] The information processing method may fur- 
ther include the steps of: 

selecting a plurality of block data including basic 25 
control information and extended control informa- 
tion from a plurality of block data of the contents us- 
age control information; 
decrypting blocks of the selected block data; 
verifying, for falsification, the block data based on 30 
falsification verification data; and 
using the contents based on the decrypted contents 
usage control information if no falsification is con- 
firmed. 

35 



[0073] According to a twelfth aspect of the present in- 
vention, there is provided an information processing 
method of recording usage management contents in an 
information recording medium, including the steps of: 



stituent data of the blocks and the unit keys ; gener- 
ating encrypted block data based on the block key, 
and recording the encrypted block data in the infor- 
mation recording medium. 

[0075] In the information processing method, the 
block seeds may be extracted from block arrangement 
date which do not serve as the contents usage control 
information. 

[0076] The information processing method may fur- 
ther include the steps of: 

dividing the contents usage control information in 
different categories representing basic control infor- 
mation and extended control information, storing 
the basic control information in one block, generate 
falsification verification data for data of the block 
storing the basic control information, storing the fal- 
sification verification data in the same block, and re- 
cording the falsification verification. 

[0077] The information processing method may fur- 
ther include the steps of: 

dividing the contents usage control information in 
different categories representing basic control infor- 
mation and extended control information, storing 
the basic control information in one block, generate 
first falsification verification data for data of the 
block storing the basic control information, storing 
the falsification verification data in the same block, 
and recording the falsification verification; and 
generating second falsification verification data for 
all data of the basic control information and the ex- 
tended control information, and record the second 
falsification verification data. 

[0078] According to a thirteenth aspect of the present 
invention, there is provided a computer program for re- 
40 producing usage management contents, including the 
steps of: 

acquiring contents usage control information corre- 
sponding to contents management units stored in 
an information recording medium; 
decrypting blocks of block data each having a pre- 
determined amount of data and serving as the con- 
tents usage control information by applying unit 
keys established in association with the contents 
management units; 

verifying, for falsification, the blocks based on falsi- 
fication verification data included in the block data; 
and 

using the contents based on the decrypted contents 
usage control information if no falsification is con- 
firmed. 

[0079] According to a fourteenth aspect of the present 



generating falsification verification data for contents 
usage control information corresponding to con- 
tents management units established for individual 
usage management control; 

encrypting the contents by applying unit keysestab- 45 
lished respectively in association with the contents 
management units to generate encrypted data; and 
generating and recording encrypted contents us- 
age control information including the falsification 
verification data. 50 

[0074] The information processing method may fur- 
ther include the steps of: 

dividing the contents usage control information into 55 
blocks each having a predetermined amount data, 
generating a block key according to an encryption 
process applying block seeds extracted from con- 
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invention, there is provided a computer program for re- 
cording usage management contents in an information 
recording medium, including the steps of: 

generating falsification verification data for contents 
usage control information corresponding to con- 
tents management units established for individual 
usage management control; 

encrypting the contents by applying unit keys estab- 
lished respectively in association with the contents 
management units to generate encrypted data; and 
generating and recording encrypted contents us- 
age control information including the falsification 
verification data. 

[0080] The computer program according to embodi- 
ments of the present invention may include a computer 
program that can be supplied to a computer system 
which is capable of executing various program codes, 
through a computer-recording medium such as a CD, 
an FD, an MO, of the like, or through a communication 
medium such as a network orthe like. By providing such 
a program in a computer-readable form to the computer 
system, the computersystem performs a process based 
on the program. 

[0081] Further particular and preferred aspects of the 
present invention are set out in the accompanying inde- 
pendent and dependent claims. Features of the depend- 
ent claims may be combined with features of the inde- 
pendentclaims as appropriate, and in combinations oth- 
er than those explicitly set out in the claims. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0082] The present invention will be described further, 
by way of example only, with reference to preferred em- 
bodiments thereof as illustrated in the accompanying 
drawings, in which: 

FIG. 1 is a diagram showing a storage data arrange- 
ment of an information recording medium; 
FIG. 2 is a diagram showing an example of a format 
of stored contents of an information recording me- 
dium; 

FIG. 3 is a diagram showing an example of contents 
management units set for stored contents of an in- 
formation recording medium; 
FIG. 4 is a diagram showing a table of contents 
management units and unit keys; 
FIG. 5 is a diagram showing an example of a format 
of storage contents including first playback and top 
menu; 

FIG. 6 is a diagram showing an example of contents 
management units set for a contents arrangement 
including first playback and top menu; 
FIG. 7 is a diagram showing an example of a table 
of contents management units and unit keys for an 
arrangement including first playback and top menu; 



FIG. 8 is a diagram showing contents usage modes 
and contents usage limitations of contents in a net- 
work-discrete state and a network-bound state; 
FIG. 9 is a diagram showing contents copy limita- 
5 tions of contents in a network- discrete state and a 
network-bound state; 

FIG. 10 is a diagram showing an example of data 
of a contents state management table; 
FIG. 11 is a diagram showing an example of data of 
10 a contents playback and copy control information 
management table; 

FIG. 12 is a diagram showing an example of data 
of the contents playback and copy control informa- 
tion management table where contents manage- 
rs ment information depending on the state of con- 
tents is recorded with variable-length data; 
FIG. 13 is a diagram showing an example (example 

1 ) of the arrangement of a data storage directory in 
the information recording medium; 

20 FIG. 14 is a diagram showing an example (example 

2) of the arrangement of a data storage directory in 
the information recording medium; 

FIG. 15 is a diagram showing an example (example 

3) of the arrangement of a data storage directory in 
25 the information recording medium; 

FIG. 16 is a diagram showing the manner in which 
management information is stored; 
FIG. 17 is a diagram showing a falsification preven- 
tion and encryption arrangement for playback/copy 
30 control information; 

FIG. 18 is a diagram showing a falsification preven- 
tion and encryption arrangement where a hash 
function is applied to playback/copy control infor- 
mation; 

35 FIG. 19 is a diagram showing a falsification preven- 
tion and encryption arrangement where repeated 
data of playback/copy control information are ap- 
plied; 

FIG. 20 is a diagram of an arrangement of data of 
40 contents usage control information recorded on the 
information recording medium, i.e., a recorded ar- 
rangement of data making up an individual file cor- 
responding to playback/copy control information of 
each CPS unit; 
45 FIG. 21 is a diagram showing a directory illustrative 
of an overall data arrangement recorded on the in- 
formation recording medium; 
FIG. 22 is a diagram showing a data arrangement 
of a unit key generation value information 
50 (U n it_Key_Gen_Val ue . i nf) ; 

FIG. 23 is a diagram showing a contents arrange- 
ment according to a Blu-ray Disc ROM format illus- 
trative of an association between AV streams and 
CPS units: 

55 FIG. 24 is a diagram showing a block encryption 
process using a block key Kb; 
FIG. 25 is a diagram showing a decryption process 
using the block key Kb; 
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FIG. 26 is a diagram showing an overall recorded 
data arrangement of contents usage control infor- 
mation corresponding to a certain single CPS unit; 
FIG. 27 is a diagram showing an example of a re- 
corded contents usage control information file cor- 
responding to a single contents management units 
(CPS unit) and an example of hash values set as 
falsification verification data; 
FIG. 28 is a diagram showing a specific example of 
basic control information (Basic CCI) and extended 
control information (Extended CCI); 
FIG. 29 is a diagram showing a syntax correspond- 
ing to a stored example of the contents usage con- 
trol information shown in FIG. 27; 
FIG. 30 is a diagram showing an example of a re- 
corded contents usage control information file and 
an example of hash values set as falsification veri- 
fication data; 

FIG. 31 is a diagram showing a syntax correspond- 
ing to a stored example of the contents usage con- 
trol information shown in FIG. 30; 
FIG. 32 is a flowchart of a processing sequence of 
an information processing apparatus for reading 
only basic control information and performing con- 
tents usage according to the basic control informa- 
tion; 

FIG. 33 is a flowchart of a processing sequence of 
the information processing apparatus for reading 
both basic control information and extended control 
information and performing contents usage accord- 
ing to the basic control information and the extend- 
ed control information; and 
FIG. 34 is a diagram showing an example of an ar- 
rangement of the information processing apparatus 
which is loaded with and plays back an information 
recording medium. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0083] Details of an information processing appara- 
tus, an information recording medium, an information 
processing method, and a computer program according 
to embodiments of the present invention will be de- 
scribed below with reference to the drawings. Embodi- 
ments of the invention will be described successively in 
respect of separate items given below. 

1 . Storage data arrangement of information record- 
ing medium 

2. Example of stored contents arrangement 

3. Encryption and usage management arrangement 
of stored contents 

4. First playback and menu display processing ar- 
rangement 

5. Contents usage management based on network- 
discrete and -bound states 

6. Contents copy management in network 



7. Management information for contents manage- 
ment units 

8. Storage arrangement of main contents, subcon- 
tents, and contents 

5 9. Encryption and falsification prevention process- 
ing arrangements for contents usage control infor- 
mation 

(9-1) Summary of encryption and falsification 
10 prevention processing arrangements for con- 

tents usage control information 
(9-2) Specific example of encryption and falsi- 
fication prevention processing arrangements 
for contents usage control information 

15 

10. Example of arrangement of information 
processing apparatus 

[1 . Storage data arrangement of information recording 
20 medium] 

[0084] First, the storage data arrangement of an in- 
formation recording medium will be described below. 
FIG. 1 shows byway of example an information record- 
25 ing medium storing contents to which the processing ac- 
cording to an embodiment of the present invention. In 
FIG. 1 , information stored on a ROM disc as a contents- 
stored disc is illustrated by way of example. 
[0085] The ROM disc is an information recording me- 
30 dium that stores legitimate contents which is manufac- 
tured by a disc manufacturing factory under the permis- 
sion of contents right holders who have lawful contents 
copyrights or distribution rights. In the embodiment be- 
low, a disc-type medium will be described as an example 
35 of information recording medium. However, embodi- 
ments of the present invention are applicable to ar- 
rangements which employ various forms of information 
recording mediums. 

[0086] As shown in FIG. 1, an information recording 
40 medium 1 00 stores various contents. The contents are 
generally classified into two categories. One of the cat- 
egories contains main contents 101 including AV (Audio 
Visual) streams, game programs of the type prescribed 
by certain standards, image files, audio data, and text 
45 data. The AV streams include moving image contents 
such as HD (High Definition) movie contents which in- 
clude high-definition moving image data. The main con- 
tents 101 are certain AV format standard data and are 
stored according to a certain AV data format. Specifical- 
50 |y, the main contents 101 are stored as Blu-ray disc 
ROM standard data according to a Blu-ray disc ROM 
standard format. 

[0087] Furthermore, game programs, image files, au- 
dio data, and text data as service data are stored as sub- 
55 contents 102. The subcontents 102 are data having a 
data format not in accordance with a certain AV data 
format. Specifically, the subcontents 102 are stored as 
Blu-ray disc ROM nonstandard data according to an ar- 
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b it rary format not in accordance with a Blu-ray disc ROM 
standard format. 

[0088] Both the main contents 101 and the subcon- 
tents 102 contain various types of contents including 
music data, image data such as moving images, still im- 
ages, etc., game programs, and WEB contents. These 
contents contain various types of information such as 
contents information available based on only data from 
the information recording medium 1 00, and contents in- 
formation available based on a combination of data from 
the information recording medium 100 and data provid- 
ed from a networked server. 

[0089] Each or a set of contents contained in the main 
contents 1 01 and the subcontents 1 02 are encrypted 
with individual encryption keys (unit keys) and stored in 
the information recording medium 100 for usage man- 
agement of the contents. The information recording me- 
dium 100 also stores a disc ID 103 as identifying infor- 
mation of the information recording medium 100. 

[2. Example of stored contents arrangement] 

[0090] A storage format of the contents that are stored 
in the information recording medium according to an 
embodiment of the present invention will be described 
below with reference to FIG. 2. 

[0091] As shown in FIG. 2, the information recording 
medium stores AV streams of moving image contents 
such as HD (High Definition) movie contents which in- 
clude high-definition moving image data as main con- 
tents 200, and also stores other data and programs, e. 
g. , game programs, image files, audio data, and text da- 
ta as service data as subcontents 300. 
[0092] The main contents 200 are stored as Blu-ray 
disc ROM standard data, for example, according to a 
Blu-ray disc ROM standard format. The subcontents 
300 are stored as Blu-ray disc ROM nonstandard data 
according to an arbitrary format not in accordance with 
a Blu-ray disc ROM standard format. 
[0093] As shown in FIG. 2, the main contents 200 that 
are stored according to the Blu-ray disc ROM standard 
format include moving image contents (AV streams) 
stored as actual contents to be reproduced, and has a 
layered arrangement according to the Blu-ray disc ROM 
standard format. That is, the main contents 200 include: 

(A) applications 21 0; 

(B) playback interval designation files (play lists) 
230; and 

(C) clips (contents data files) 240. 

[0094] (C) The clips (contents data files) 240 have 
clips 241 , 242, 243 that are segmentalized contents da- 
ta files. Each clip 241 has an AV (Audio-Visual) stream 
file 261 and a clip information file 251 . 
[0095] The clip file 251 is a data file storing attribute 
information relating to the AV (Audio-Visual) stream file 
261 . The AV (Audio-Visual) stream file 261 includes 



MPEG-TS (Moving Picture Experts Group-Transport 
Stream) data having a data structure of multiplexed in- 
formation including video, audio, and subtitle data, etc. 
Command information for controlling the reproducing 
5 device at the time contents are reproduced may also be 
multiplexed in the AV (Audio-Visual) stream file 261 . 
[0096] (B) The playback interval designation files 
(play lists) 230 has a plurality of playback interval des- 
ignation files (play lists) 231 , 232, 233. Each of the play- 
10 back interval designation files (play lists) 231 , 232, 233 
is of such an arrangement that it selects either one of 
the AV stream data files included in the clips (contents 
data files) 240, and has at least one play items desig- 
nating, as a playback start point and a playback end 
15 point, certain data of the selected AV stream data file. 
By selecting one playback interval designation file (play 
list), a playback sequence is determined and contents 
are reproduced according to the play items of the se- 
lected playback interval designation file (play list). 
20 [0097] For example, if the playback interval designa- 
tion file (play list) 231 is selected and contents are re- 
produced, a play item 234 associated with the playback 
interval designation file (play list) 231 has a playback 
start point "a" and a playback end point "b" in the clip 
25 241 , and a play item 235 has a playback start point "c" 
and a playback end point "d" in the clip 241 . Therefore, 
if the playback interval designation file (play list) 231 is 
selected and contents are reproduced, certain data ar- 
eas, "a" through "b" and "c" through "d", of the AV stream 
30 file 261 which is contents contained in the clip 241 are 
reproduced. 

[0098] (A) The applications 210 are established as 
layers having combinations of application index files 
211 , 212 and playback programs 221 , 222, orcombina- 
35 tions of application execution files 213, 214 and play- 
backprograms 223, 224. The application indexfiles211 . 
21 2 include contents titles presented on a display which 
reproduces contents. The application execution files 
213, 314 include game contents and WEBcontents. The 
40 user can determine an object to be reproduced by se- 
lecting a title included in the application index files 211 . 
212. 

[0099] As shown in FIG. 2, each of the titles is asso- 
ciated with one of the playback programs (movie ob- 
45 jects) 221 through 224. When the user selects one title, 
a playback process is started based on the playback 
program associated with the selected title. The applica- 
tion index files 21 1 , 21 2 which are represented as titles 
1, 2 in FIG. 2 include a title presentation program for 
50 displaying a title and a menu that are automatically re- 
produced when the information recording medium is set 
and activated. 

[0100] The application index files 211 ,212 and the ap- 
plication execution files 213, 214 occasionally include 
55 application resource files that are used when applica- 
tions are executed. Various data files, e.g., that can be 
acquired from an information recording medium ora net- 
worked server, e.g., image files 225 such as JPEG, 
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PNG, and BMP files, audio files 226 such as PCM and 
compressed audio files, and various data files 227 such 
as text and database files are occasionally applied as 
application resource files. 

[0101] The playback programs (movie objects) 221 
through 224 are contents playback processing pro- 
grams for programmably providing functions necessary 
to present playback contents (HD movie contents). The 
functions include designating playback interval designa- 
tion files (play lists), responding to manipulating infor- 
mation relative to a contents playback process input 
from the user, jumping between titles, and branching a 
playback sequence. The playback programs 221 
through 224 can jump to each other. According to a user 
input or a preset program, a playback program to be ac- 
tually executed is selected, and playback contents are 
selected from the clips 240 and reproduced by a play- 
back interval designation file (play list) 230 that is des- 
ignated by the selected playback program. 
[0102] As shown in FIG. 2, the main contents 200 are 
managed in a layered arrangement according to the Blu- 
ray disc ROM standard format, as Blu-ray disc ROM 
standard data, for example. With respect to the frame- 
work of the layered arrangement, contents manage- 
ment units (CPS units) are established, and usage man- 
agement of contents is performed for each of the con- 
tents management units (CPS units). Details of the con- 
tents management units (CPS units) will be described 
later on. 

[0103] The information recording medium stores the 
subcontents 300 in addition to the main contents 200. 
The subcontents 300 are contents stored according to 
a certain AV format, e.g., an arbitrary format not in ac- 
cordance with the Blu-ray disc ROM standard format. 
[0104] The subcontents 300 are game programs, im- 
age files, audio data, and text data as service data, for 
example. Sets of data files are set as data groups in the 
subcontents 300. 

[0105] FIG. 2 shows a data group 1.311 through a 
data group N, 312. These data groups can also be es- 
tablished as usage management contents. When data 
groups are established as usage management con- 
tents, a content management unit (CPS unit) is estab- 
lished for each data group to perform usage manage- 
ment of each data group. 

[3. Encryption and usage management arrangement of 
stored contents] 

[01 06] A contents management arrangement for real- 
izing different usage control for each of segmentalized 
contents stored in the information recording medium will 
be described below with reference to FIG. 3. 
[0107] According to embodiments of the present in- 
vention, a different key (unit key) for each of segmen- 
talized contents is assigned as a basic arrangement for 
realizing different usage control for each of segmental- 
ized contents. A unit to which one unit key is assigned 



is referred to as a contents management unit (CPS unit). 
[0108] Each unit key is applied to encrypt the contents 
belonging to each unit. For using the contents, the key 
(unit key) assigned to each unit is acquired to reproduce 

5 the contents. Each unit key can individually be man- 
aged. For example, a unit key assigned to a certain unit 
A may be established as a key that can be acquired from 
the information recording medium, and a unit key as- 
signed to a certain unit B may be established as a key 

10 that can be acquired by accessing a networked server 
and meeting such a condition that the user has carried 
out a predetermined procedure. In this manner, keys as- 
sociated with respective units may be acquired and 
managed in independent manners for the respective 

15 unit keys. 

[0109] The manner in which units to which one key is 
assigned, i.e., contents management units (CPS units), 
are set will be described below with reference to FIG. 3. 
[0110] First, an arrangement for setting contents 
20 management units (CPS units) in the main contents 200 
will be described below. 

[0111] In the main contents 200, CPS units including 
application index files 21 1 , 21 2 or application execution 
files 213, 214 including one or more titles contained in 
25 (A) the applications 210 are set. 

[0112] A CPS unit 1 , 401 shown in FIG. 3 is a single 
unit including application index files, playback program 
files, play lists, and a group of AV stream files as actual 
contents data. 

30 [0113] A CPS unit 2, 402 is a single unit including ap- 
plication execution files, playback program files, play 
lists, and a group of AV stream files as actual contents 
data. 

[0114] A CPS unit 3, 403 is a unit including application 
35 execution files, playback program files, and various data 
files that can be acquired from the information recording 
medium or a networked server. 

[0115] These units are individually encrypted using 
the same key (CPS unit key: key Ku1 , Ku2, Ku3 in FIG. 

40 3) and stored in the information recording medium. 
[0116] In FIG. 3, the contents management unit (CPS 
unit) 1, 401 and the contents management unit (CPS 
unit) 2, 402 are units which include (A) an application 
layer in the upper-level layer and (B) playback interval 

45 designation files (play lists) + (C) clips (contents data 
files) in the lower-level layer. The contents management 
unit (CPS unit) 3. 403 is a unit which does not include 
(B) playback interval designation files (play lists) + (C) 
clips (contents data files) in the lower-level layer, but in- 

50 eludes (A) applications in the upper-level layer and var- 
ious data files that can be acquired from the information 
recording medium or a networked server, i.e., image 
files 225, audio files 226, data files 227, etc. 
[0117] The contents management unit (CPS unit) 1 . 

55 401 includes a title 1 , 211 , a title 2, 212, playback pro- 
grams 221 , 222, play lists 231 , 232, a clip 241 , and a 
clip 242. AV stream data files 261 , 262 as actual con- 
tents data contained in these two clips 241 , 242 are en- 
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crypted with the unit key Ku1 which is an encryption key 
set in association with the contents management unit 
(CPS unit) 1, 401. 

[0118] The contents management unit (CPS unit) 2, 

402 includes an application file 21 3 including game con- 
tents, WEB contents, etc., a playback program 223, a 
play list 233, and a clip 243. An AV stream data file 263 
as actual contents data contained in the clip 243 is en- 
crypted with the unit key Ku2 which is an encryption key 
set in association with the contents management unit 
(CPS unit) 2, 402. The application file 213 may be an 
encrypted file generated with the unit key Ku2. 
[0119] The contents management unit (CPS unit) 3, 

403 is established as a unit including application files 
214, 215, a playback program 224, and various data 
files that can be acquired from the information recording 
medium or a networked server by the playback program 
224. The application files 214, 215 are contained in (A) 
the application layer as the upper-level layer. The con- 
tents management unit 3, 403 includes image files 225 
such as JPEG, PNG, and BM P files, audiofiles 226 such 
as PCM and compressed audio files, and various data 
files 227 such as text and database files. 

[0120] The contents management unit (CPS unit) 3, 
403 is encrypted with the unit key Ku3 which is an en- 
cryption key set in association with the contents man- 
agement unit (CPS unit) 3, 403. 
[0121] For example, for the user to reproduce an ap- 
plication file or contents corresponding to the contents 
management unit (CPS unit) 1 , 401 , it is necessary to 
acquire the unit key Ku1 which is an encryption key set 
in association with the contents management unit (CPS 
unit) 1 , 401 and decrypt the application file or contents 
with the unit key Ku1. After the decrypting process is 
performed, the application program may be executed to 
reproduce the contents. 

[0122] For example, for using an application file cor- 
responding to the contents management unit (CPS unit) 
3, 403 or image files 225 ; audio files 226 such as PCM 
and compressed audio files, and various data files 227 
such as text and database files that correspond to the 
playback program 224, it is necessary to acquire the unit 
key Ku3 which is an encryption key set in association 
with the contents management unit (CPS unit) 3, 403 
and decrypt the application file or contents with the unit 
key Ku3. After the decrypting process is performed, the 
application program is executed or the various files are 
executed. 

[0123] Limitations posed on the above processing are 
that while a certain title is being reproduced, it is not pos- 
sible to reproduce AV stream files that are not included 
in the CPS unit to which the title belongs. 
That is, a movie object executed during the reproduction 
of a title should not include a command for reproducing 
AV stream files that are not included in the CPS unit to 
which the title belongs. Movie objects can have a com- 
mand for performing title switching. When title switching 
occurs due to a title jump command, the reproducing 



device determines that the title being reproduced is 
changed. Specifically, in FIG. 3, it is possible to execute 
a command for jumping to the title 2, 212 while the title 
1 , 211 is being reproduced. After the jump, the title 2. 
5 212 is reproduced. 

[0124] A play list can refer to a plurality of clips, but 
the clips that can be referred to are limited to those in- 
cluded in one CPS unit. 

[0125] By setting these limitations, the unit key does 
10 not change while the titles belonging to one CPS unit 
are being reproduced. As a result, a seamless connec- 
tion is easily achieved when AV streams are successive- 
ly reproduced in the titles. 

[0126] Since titles represent information that is visible 
15 to the user, they are advantageous in that it is easy to 
explain to the user and manage contents when keys are 
distributed and contents are managed with respect to 
respective CPS units. 

[0127] When play lists are referred to while an appli- 

20 cation is being executed, as when titles are reproduced, 
a seamless connection is easily achieved while AV 
streams belonging to one CPS unit are being repro- 
duced. As resource files used during the execution of 
an application file are encrypted with the same key, the 

25 encryption key (CPS unit key) is not changed during the 
execution of the application, allowing the decrypting 
process to be performed smoothly. 
[01 28] As described above, the information recording 
medium stores the subcontents 300 in addition the main 

30 contents 200. The subcontents 300 represent game 
programs, image files, audio data, and text data as serv- 
ice data, and include a set of data files set as data 
groups. The subcontents 300 are stored as Blu-ray disc 
ROM nonstandard data according to an arbitrary format 

35 not in accordance with the Blu-ray disc ROM standard 
format. 

[0129] The data groups in the subcontents 300 can 
also be established as usage management contents. If 
the data groups in the subcontents 300 are established 
40 as usage management contents, then the data groups 
are set as contents management units (CPS units), and 
usage management is performed for each of the data 
groups. 

[0130] In the example shown in FIG. 3, the data group 
45 1,311 in the subcontents 300 is established as a con- 
tents management unit (CPS unit) 4, 404, and the data 
group N, 31 2 is established as a contents management 
unit (CPS unit) 5, 405. 

[0131] Files contained in the contents management 
50 unit (CPS unit) 4, 404 are encrypted with a unit key Ku4 
which is an encryption key set in association with the 
contents management unit (CPS unit) 4, 404. 
[01 32] For performing usage of programs and data in- 
cluded in the files corresponding to the contents man- 
55 agement unit (CPS unit) 4, 404. it is necessary to ac- 
quire the unit key Ku4 which is an encryption key set in 
association with the contents management unit (CPS 
unit) 4, 404 and decrypt the programs and data. 



13 



25 



EP 1 538 621 A1 



26 



[0133] Files contained in the contents management 
unit (CPS unit) 5, 405 are encrypted with a unit key Ku5 
which is an encryption key set in association with the 
contents management unit (CPS unit) 5, 405. 
[0134] For performing usage of programs and data in- 
cluded in the files corresponding to the contents man- 
agement unit (CPS unit) 5, 405, it is necessary to ac- 
quire the unit key Ku5 which is an encryption key set in 
association with the contents management unit (CPS 
unit) 5, 405 and decrypt the programs and data. 
[0135] Though not shown, there is a supervisory play- 
back control program for performing supervisory control 
over the reproduction of contents. The supervisory play- 
back control program performs supervisory control over 
the reproduction of contents. 

[0136] The supervisory playback control program 
identifies a contents management unit (CPS unit) cor- 
responding to contents that are instructed to be repro- 
duced by the user, and performs a process of acquiring 
a CPS encryption key corresponding to the identified 
CPS management unit information. If the supervisory 
playback control program fails to acquire a CPS encryp- 
tion key, then it displays a message indicative of a play- 
back failure. The supervisory playback control program 
also detects switching to a contents management unit 
(CPS unit) in the event of a playback execution, and ac- 
quires a necessary key and displays a message indic- 
ative of a playback failure. 

[0137] The supervisory playback control program per- 
forms a playback management process based on a unit 
arrangement and unit key management table shown in 
FIG. 4. 

[0138] As shown in FIG. 4, the unit arrangement and 
unit key management table contains contents manage- 
ment units (CPS units) and unit key information in as- 
sociation with indexes, application files, or data groups 
in the application layer. The supervisory playback con- 
trol program performs a playback management process 
based on the management table shown in FIG. 4. 
[0139] The management table shown in FIG. 4 con- 
tains management data corresponding to main contents 
stored according to a certain AV format (e.g., the Blu- 
ray disc ROM standard data format), and management 
data corresponding to subcontents as stored contents 
different from the certain AV format, as a single man- 
agement table. These management data may be ar- 
ranged such that the management data corresponding 
to main contents and the management data correspond- 
ing to subcontents are separately managed. A specific 
management data file arrangement (directory arrange- 
ment) will be described later. 

[0140] When the supervisory playback control pro- 
gram detects switching between contents management 
units (CPS units) based on switching between applica- 
tion indexes, the supervisory playback control program 
switches between keys to be applied due to the switch- 
ing between contents management units (CPS units). 
Alternatively, the supervisory playback control program 



performs a process of displaying a message indicating 
that a unit key needs to be acquired. 
[0141] For example, if a reproducing device which is 
performing a contents playback process stores the unit 
5 key Ku1 of the contents management unit (CPS unit) 1 . 
401 and also stores the unit key Ku2 of the contents 
management unit (CPS unit) 2, 402, then when the su- 
pervisory playback control program which performs su- 
pervisory control on the contents playback process de- 
10 tects switching between units of applications or switch- 
ing between contents, the supervisory playback control 
program switches between unit keys depending on the 
switching between contents management units (CPS 
units), i.e., switches from Ku1 to Ku2. 
15 [0142] If a reproducing device which is performing a 
contents playback process stores the unit key Ku1 of 
the contents management unit (CPS unit) 1, 401 and 
does not store the unit key Ku2 of the contents manage- 
ment unit (CPS unit) 2, 402, then when the supervisory 
20 playback control program which performs supervisory 
control on the contents playback process detects 
switching between units of applications or switching be- 
tween contents, the supervisory playback control pro- 
gram performs a process of displaying a message indi- 
25 eating that a unit key needs to be acquired. 

[0143] These processes are also performed upon unit 
switching between main contents, upon unit switching 
between subcontents, and also upon switching between 
main contents units and subcontents units. Depending 
30 on the detected unit switching, switching between unit 
keys Ku1 through Kun or the presentation of a key ac- 
quisition message is performed. 

[4. First playback and menu display processing 
35 arrangement] 

[0144] The encryption and management arrange- 
ment of contents based on the storage format and con- 
tents management units (CPS units) of contents stored 

40 in the information recording medium has been de- 
scribed above with reference to FIGS. 2 through 4. Now. 
an arrangement having a first playback as playbackcon- 
tents to be activated when an information recording me- 
dium (disc) is loaded into the drive and a top menu as 

45 contents to be reproduced when a menu displaying 
function is activated will be described below with refer- 
ence to FIGS. 5 through 7. 

[0145] FIG. 5 shows a contents storage format in an 
arrangement having a first playback and a top menu, 

50 and FIG. 6 shows an example of encryption and con- 
tents management units (CPS units) set in the contents 
storage arrangement shown in FIG. 5. 
[0146] As with FIG. 2 described above, the contents 
storage format shown in FIG. 5 is an arrangement which 

55 stores AV streams of moving image contents such as 
HD (High Definition) movie contents which include high- 
definition moving image data, for example, as the main 
contents 200, and also stores other data and programs, 
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and game programs, image files, audio data ; and text 
data as service data, for example, as the subcontents 
300. Those details in FIG. 5 which are identical to those 
in FIG. 2 are denoted by identical reference characters. 
[0147] In the arrangement shown in FIG. 5, the main 
contents 200 that are stored according to the Blu-ray 
disc ROM standard format store moving image contents 
(AV streams) as actual contents to be reproduced, and 
has a layered arrangement according to the Blu-ray disc 
ROM standard format. That is, the main contents 20 in- 
clude: 

(A) applications 21 0; 

(B) playback interval designation files (play lists) 
230; and 

(C) clips (contents data files) 240. 

[0148] (C) The clips (contents data files) 240 and (B) 
the playback interval designation files (play lists) 230 are 
identical to the arrangement described above with ref- 
erence to FIG. 2. 

[0149] In the arrangement shown in FIG. 5, (A) the 
applications 21 0 have a first playback 281 as index in- 
formation for playback contents to be activated when an 
information recording medium (disc) is loaded into the 
drive and atop menu as contents 282 as index informa- 
tion for contents to be reproduced when a menu display- 
ing function is activated. The first playback and the top 
menu are playback objects (contents) prescribed ac- 
cording to a BD-ROMAV application standard and hav- 
ing the same structure as the titles. 
[0150] The first playback 281 represents indexes for 
indicating contents that are activated and reproduced 
when an information recording medium (disc) is loaded 
into the drive. The first playback 281 includes contents 
including the display of copyright information, for exam- 
ple, and reproduced according to a playback sequence 
inherent in studios and authoring companies to display 
the logos of the studios and the authoring companies 
which edit the contents. The top menu 282 represents 
indexes for indicating contents to be displayed when a 
menu display function is performed in the reproducing 
device. 

[0151] Based on these indexes, a playback program 
corresponding to a specified index is activated, and the 
reproduction of a contents data file (AV stream) speci- 
fied by a play list indicated by the playback program is 
performed. The playback procedure is the same as the 
playback process based on an index such as a title as 
described above with reference to FIG. 2. 
[0152] An example of a contents management ar- 
rangement having contents associated with the first 
playback and contents associated with the top menu will 
be described below with reference to FIG. 6. 
[0153] According to embodiments of the present in- 
vention, as described above, a different key (unit key) 
for each of segmentalized contents is assigned as a ba- 
sic arrangement for realizing different usage control for 



each of segmentalized contents. A unit to which one unit 
key is assigned is referred to as a contents management 
unit (CPS unit). In an arrangement having contents as- 
sociated with the first playback and contents associated 
5 with the top menu, contents management units (CPS 
units) are associated with those contents for unit man- 
agement. 

[0154] Contents associated with the first playback 
and contents associated with the top menu are also en- 

10 crypted by applying respective unit keys. For using 
those contents, keys (unit keys) assigned to the respec- 
tive units are acquired to reproduce those contents. 
[0155] In the example shown in FIG. 6, one unit con- 
taining contents associated with the first playback and 

15 contents associated with the top menu is illustrated. 
Specifically, in FIG. 6, a CPS unit 1, 421 is a contents 
management unit including those contents. 
[0156] However, a CPS unit including only contents 
associated with the first playback and a CPS unit includ- 

20 ing only contents associated with the top menu may in- 
dividually be established. 

[0157] The CPS unit 1 , 421 shown in FIG. 6 is a single 
unit including application index files containing a first 
playback index 281 and atop menu index 282, playback 
25 program files, play lists, and a group of AV stream files 
as actual contents data. 

[0158] A CPS unit 2, 422 is a single unit including ap- 
plication execution files, playback program files, play 
lists, and a group of AV stream files as actual contents 
30 data. 

[0159] A CPS unit 3, 423 is a unit including application 
execution files, playback program files, and various data 
files that can be acquired from the information recording 
medium or a networked server. 
35 [0160] These units are individually encrypted using 
the same key (CPS unit key: key Ku1 , Ku2, Ku3 in FIG. 
3) and stored in the information recording medium. 
[0161] The contents management unit (CPS unit) 1 . 

421 includes a first playback index 281 , a top menu in- 
40 dex 282, playback programs 221 , 222, play lists 231 , 

232, a clip 241 , and a clip 242. AV stream data files 261 , 
262 as actual contents data contained in these two clips 
241 , 242 are encrypted with the unit key: Ku1 which is 
an encryption key set in association with the contents 
45 management unit (CPS unit) 1 , 421 . 

[0162] The contents management unit (CPS unit) 2, 

422 includes a title 1 , 283, a playback program 223, a 
play list 233, and a clip 243. An AV stream data file 263 
as actual contents data contained in the clip 243 is en- 

50 crypted with the unit key: Ku2 which is an encryption key 
set in association with the contents management unit 
(CPS unit) 2, 422. 

[0163] The contents management unit (CPS unit) 3. 

423 is established as a unit including application files 
55 214, 215 contained in (A) the application layer as the 

upper-level layer, a playback program 224, and various 
data files that can be acquired from the information re- 
cording medium or a networked server by the playback 
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program 224, i.e., image files 225 such as JPEG, PNG, 
and BMP files, audio files 226 such as PCM and com- 
pressed audio files, and various data files 227 such as 
text and database files. 

[0164] The contents management unit (CPS unit) 3, 
423 is encrypted with the unit key: Ku3 which is an en- 
cryption key set in association with the contents man- 
agement unit (CPS unit) 3, 423. 

[0165] For example, for the user to reproduce con- 
tents corresponding to the contents management unit 
(CPS unit) 1 , 421 , i.e. : contents associated with the first 
playback index 281 and the top menu index 282, it is 
necessary to acquire the unit key: Ku1 which is an en- 
cryption key set in association with the contents man- 
agement unit (CPS unit) 1 , 421 and decryptthe contents 
with the unit key: Ku1 . After the decrypting process is 
performed, the program may be executed to reproduce 
the contents. 

[0166] As described above, the supervisory playback 
control program identifies a contents management unit 
(CPS unit) correspondingto playbackcontents, and per- 
forms a process of acquiring a CPS encryption key cor- 
responding to the identified CPS management unit in- 
formation. If the supervisory playback control program 
fails to acquire a CPS encryption key, then it displays a 
message indicative of a playback failure. The supervi- 
sory playback control program also detects switching to 
a contents management unit (CPS unit) in the event of 
a playback execution, and acquires a necessary key 
and displays a message indicative of a playback failure. 
[0167] An example of the arrangement of a unit key 
management table in an arrangement wherein contents 
corresponding to a first playback as playback contents 
to be activated when an information recording medium 
(disc) is loaded into the drive and atop menu as contents 
to be reproduced when a menu displaying function is 
activated is illustrated in FIG. 7. 

[0168] As shown in FIG. 7, the unit arrangement and 
unit key management table contains contents manage- 
ment units (CPS units) and unit key information in as- 
sociation with indexes, application files, or data groups 
in the application layer. The supervisory playback con- 
trol program performs a management process based on 
the management table shown in FIG. 7. 
[0169] The table arrangement shown in FIG. 4 corre- 
sponds to the CPS settings shown in FIG. 6. The con- 
tents management unit (CPS unit) is a unit containing 
contents corresponding to the first playback and the top 
menu, and is associated with the unit key Ku1 . Different 
keys (Ku2 and so on) are associated with respective 
CPS units (CPS 2 and so on). For reproducing contents 
of each unit, it is necessary to perform a decryption proc- 
ess using a corresponding unit key. 
[0170] As described above, when the supervisory 
playback control program detects switching between 
contents management units (CPS units) based on 
switching between application indexes, the supervisory 
playback control program switches between keys to be 



applied due to the switching between contents manage- 
ment units (CPS units). Alternatively, the supervisory 
playback control program performs a process of display- 
ing a message indicating that a unit key needs to be ac- 
5 quired. 

[5. Contents usage management based on network- 
discrete and -bound states] 

10 [0171] If an information recording medium storing 
contents that are segmentalized in contents manage- 
ment units and encrypted using unit keys as encryption 
keys for the respective units is loaded into a reproducing 
device as a device connected to a network such as a 
15 home network for reproducing and using the contents, 
an arrangement for performing contents usage man- 
agement based on whether each of contents is in a state 
independent of a network or a state related to a network 
will be described below. The contents to be described 
20 below include both main contents and subcontents. 
[0172] As shown in FIG. 8 at (A), two states, i.e., a 
state independent of a network (discrete state) and a 
state related to a network (bound state), are defined as 
states of contents management units (CPS units) on a 
25 recording medium. 

[01 73] If a plurality of contents (contents management 
units) are present on the recording medium, then it is 
managed which state each of the contents management 
units (CPS units) is in. Management information indica- 
te tive of the discrete/bound state of each contents man- 
agement unit (CPS unit) is recorded in an information 
recording medium, a reproducing device (information 
reproducing device) loaded with an information record- 
ing medium, or a management server on a home net- 
35 work which performs an information management proc- 
ess. 

[0174] Contents 1 through 6 shown in FIG. 8 corre- 
spond respectively to contents management units (CPS 
units), and belong to main contents or subcontents. 
40 [0175] A process of reproducing contents will be de- 
scribed below. 

[0176] Contents that are segmentalized in contents 
management units (CPS units) stored on an information 
recording medium include contents that can be repro- 
45 duced in the discrete state and contents that cannot be 
reproduced in the discrete state. 
[0177] The contents 1 through 4 shown in FIG. 8 are 
contents that can be reproduced in the discrete state, 
and the contents 5, 6 are contents that cannot be repro- 
50 duced in the discrete state. 

[0178] Each of the contents (contents management 
units) on the recording medium can be brought into the 
bound state by a user's operation or a process in the 
reproducing device. There are also contents that are in- 
55 hibited from being brought into the bound state, such as 
the contents 1 shown in FIG. 8 at (a). 
[0179] The information about the discrete and bound 
states is determined as attributes of the contents (con- 
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tents management units) stored in the information re- 
cording medium, and is stored in the information record- 
ing medium as attribute information corresponding to 
the respective contents management units. 
[0180] With respect to each of the contents (contents 
management units), there are determined in advance 
processes that can be performed in the two states, i.e., 

(1) the discrete state; and 

(2) the bound state. 

[0181] The information about these processes is re- 
corded as corresponding attribute information of the 
contents (contents management units) in either the in- 
formation recording medium or a management server 
holding management information. 
[0182] Examples are contents (contents manage- 
ment units) shown in FIG. 8 at (a) through (f). 

(a) Contents 1 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that cannot be changed to the 
bound state. 

(b) Contents 2 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that can be reproduced in a 
streaming playback process using a network con- 
nection in the bound state. The streaming playback 
process is a contents playback process for sending 
data on a recording medium or digital data convert- 
ed from data on a recording medium through a net- 
work, and decoding and displaying the data with a 
receiving device. 

(c) Contents 3 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that can be reproduced in a re- 
mote playback process using a network connection 
in the bound state. The remote playback process is 
a contents playback process wherein a transmitting 
device performs a process including a response to 
a user's operation such as in interactive contents of 
DVD-Video and sends only video data to be dis- 
played on a screen and audio data to be reproduced 
in a data format that can be displayed by a receiving 
device. In the remote playback process, user's op- 
eration commands need to be received by the re- 
ceiving device and sent through the network to the 
reproducing device which is sending the data. 

(d) Contents 4 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that are reproduced as a com- 
bination of contents on a recording medium and da- 
ta downloaded through a network in the bound 
state. 

The downloaded data are assumed to be sub- 
titles in languages, audio data, and menu image da- 
ta that are not stored on the recording medium, and 
a latest version of data that are used upon contents 



playback. The contents 4 are contents that can be 
reproduced in the discrete state in combination with 
the downloaded data in the bound state. 

(e) Contents 5 are contents that cannot be repro- 
5 duced in the discrete state, and are contents (con- 
tents management units) that can be reproduced 
only in the bound state. 

A necessary key, i.e., a unit key correspond- 
ing to contents management units defined as the 
10 contents 5, can be acquired through a network for 
reproducing the contents. By allowing contents to 
be reproduced underthe condition of the acquisition 
of a unit key, it is possible to provide a service to 
charge and sell key information when contents that 
15 cannot be reproduced in the discrete state are dis- 
tributed, sold, and reproduced. 

(f) Contents 6 are contents that cannot be repro- 
duced in the discrete state, and are contents (con- 
tents management units) that can be reproduced 

20 only in the bound state, and also are contents (con- 
tents management units) that can be reproduced as 
a combination of contents on a recording medium 
and data downloaded through a network in the 
bound state. 

25 

[0183] The (d) contents 4 through the (f) contents 6 
require that a network connection be made and down- 
loaded data or a unit key be acquired. As preconditions 
for acquiring those data, an authentication process is 
30 performed to confirm that a data request is made from 
a proper device or user, and downloaded data and a unit 
key are provided the server if the authentication process 
is successful. The data transferred through the network 
are encrypted and provided to the user device. These 
35 processing details will be described later. 

[6. Contents copy management in network] 

[0184] If an information recording medium storing 

40 contents that are segmentalized in contents manage- 
ment units and encrypted using unit keys as encryption 
keys for the respective units is loaded into a reproducing 
device as a device connected to a network such as a 
home network for reproducing and using the contents, 

45 an arrangement for performing contents copy manage- 
ment based on whether each of contents is in a state 
independent of a network or a state related to a network 
will be described below. The contents to be described 
below include both main contents and subcontents. 

50 [0185] As shown in FIG. 9 at (A), two states, i.e., a 
state independent of a network (discrete state) and a 
state related to a network (bound state), are defined as 
states of contents management units (CPS units) on a 
recording medium. 

55 [0186] If a plurality of contents (contents management 
units) are present on the recording medium, then it is 
managed which state each of the contents management 
units (CPS units) is in. Management information indica- 
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tive of the discrete/bound state of each contents man- 
agement unit (CPS unit) is recorded in an information 
recording medium, a reproducing device (information 
reproducing device) loaded with an information record- 
ing medium, or a management server on a home net- 
work which performs an information management proc- 
ess. 

[0187] Contents 1 through 6 shown in FIG. 9 corre- 
spond respectively to contents management units (CPS 
units). Each of the contents (contents management 
units) on the recording medium can be brought into the 
bound state by a user's operation or a process in the 
reproducing device. There are also contents that are in- 
hibited from being brought into the bound state, such as 
the contents 1 shown in FIG. 9 at (a). 
[0188] The information about the discrete and bound 
states is determined as attributes of the contents (con- 
tents management units) stored in the information re- 
cording medium, and is stored in the information record- 
ing medium or a management server storing manage- 
ment information, as attribute information correspond- 
ing to the respective contents management units. 
[0189] With respect to each of the contents (contents 
management units), there are determined in advance 
copying processes that can be performed in the two 
states, i.e., 

(1 ) the discrete state; and 

(2) the bound state. 

[0190] The information about these copying process- 
es is recorded as corresponding attribute information of 
the contents (contents management units) in either the 
information recording medium orthe management serv- 
er holding management information. 
[0191] Examples are contents (contents manage- 
ment units) shown in FIG. 9 at (a) through (f). 

(a) Contents 1 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that cannot be changed to the 
bound state. 

(b) Contents 2 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that can be reproduced, but 
cannot be copied in the bound state. 

(c) Contents 3 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that can also be reproduced in 
the bound state, and are also contents (contents 
management units) that can be copied to a record- 
ing medium which is of the same type as the copy 
source only in the bound state. 

Copy destinations are assumed to be three ob- 
jects, i.e., 

a recording medium which is of the same type 
as the copy source, 

a different recording medium (in the network), 



and 

a portable unit. 
The contents 3 are contents that are allowed to 
be copied only to a recording medium which is of 

5 the same type as the copy source. Only if the copy 
destination is confirmed to be a recording medium 
which is of the same type as the copy source, the 
copy source can send the data on the recording me- 
dium to the copy destination. 

10 (d) Contents 4 are contents that can be reproduced 
in the discrete state, and are contents (contents 
management units) that can be reproduced in the 
bound state, and also are contents (contents man- 
agement units) that are allowed to be copied to a 

15 recording medium which is of a different type from 
the copy source only in the bound state. 

The contents 4 are allowed to be copied to a 
recording medium which is of a different type from 
the copy source. If necessary, the device of the copy 

20 source orthe copy destination needs to convert the 
data and record the copy data. 

(e) Contents 5 are contents that cannot be repro- 
duced in the discrete state, and are contents (con- 
tents management units) that can also be repro- 

25 duced in the bound state, and also are contents 
(contents management units) that are allowed to be 
copied to a portable unit only in the bound state. 
The portable unit may be taken out of a home net- 
work, and copy management therefor needs to be 
30 performed in view of a possible takeout of the port- 
able unit. 

Limitations on copy need to be prescribed for 
the number of copies, an expiration date, and a 
process to be performed when an original recording 
35 medium is no longer in the bound state. These items 
of information should preferably be prescribed sep- 
arately for the above three copying patterns. The 
process to be performed when an original recording 
medium is no longer in the bound state is assumed 
40 to invalidate the copy data, invalidate the copy data 
after a certain period of time, and erase the copy 
data. Any data that are not erased can be used as 
they are when the recording medium is back in the 
bound state again. Therefore, when the recording 
45 medium is rented to a friend, the copy data may be 
inhibited temporarily from usage, and when the re- 
cording medium is returned, the copy data may be 
used again. 

(f) Contents 6 are contents that cannot be repro- 
50 duced in the discrete state, and are contents (con- 
tents management units) that can be reproduced 
only in the bound state, and also are contents (con- 
tents management units) whose copy data are 
stored in advance in a recording medium for being 

55 copied through a home network. 

[0192] The copy data may be of a type that cannot be 
reproduced on the device of copy source, and may be 
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of an arrangement that can be reproduced as a result 
of being copied to another device. For example, copy 
data having the same contents may be stored in a data 
format (e.g., a file type such as AVI or the like or an 
MPEG-PS format that can be reproduced by a personal 
computer) that can be reproduced by general networked 
devices, in a recording medium which stores data in a 
plurality of layered formats described above with refer- 
ence to FIGS. 2 and 3, and for copying the copy data 
through a network, the copy data are sent for reproduc- 
tion on those general networked devices. 
[0193] Prior to copying contents, it is preferable to 
perform authentication and key acquisition through a 
network. Furthermore, a system which charges for each 
copy and needs a key for copying should preferably be 
of a contents management arrangement for limiting the 
number of copies based on the number of times that a 
key is distributed. 

[7. Management information for contents management 
units] 

[0194] Management information for contents man- 
agement units in an information recording medium 
which stores contents that are segmentalized in the 
above contents management units and encrypted using 
unit keys as encryption keys for the respective units will 
be described below. The contents to be described below 
include both main contents and subcontents. 
[0195] As described above, one unit key is estab- 
lished in association with a contents management unit 
(CPS unit). A contents management unit (CPS unit) and 
key management table is established as the unit key in- 
formation management table [unit arrangement and unit 
key management table] as shown in FIG. 4. 
[0196] As attribute information associated with con- 
tents management units (CPS units), there is available 
state information indicative of whether each of the con- 
tents management units (CPS units) is in: 

a. the discrete state; or 

b. the bound state. 

[0197] In an information recording medium that is in- 
capable of writing data therein, only the above state in- 
formation is described in its initial state. 
[0198] In an information recording medium that is ca- 
pable of writing data therein, two items of information, i. 
e., an initial state and a current state, are recorded. The 
current state information is written on the information re- 
cording medium by an information processing device as 
a reproducing device loaded with the information re- 
cording medium or a networked server. 
[0199] FIG. 1 0 shows an example of the arrangement 
of "state management table" of initial states and current 
states that are recorded in an information recording me- 
dium that is capable of writing data therein. The table 
describes whether each of the initial states and the cur- 



rent states of contents management units (CPS units) 
is in the discrete state or the bound state. 
[0200] The state management table shown in FIG. 1 0 
is recorded in the information recording medium and al- 

5 so in an external device such as an information process- 
ing device as a reproducing device loaded with the in- 
formation recording medium or a networked server. 
[0201] In an information recording medium that is in- 
capable of writing data therein, only initial state data are 

10 recorded. The external device such as an information 
processing device as a reproducing device loaded with 
the information recording medium or a networked server 
has a state management table of initial states and cur- 
rent states that are recorded. 

15 [0202] The initial states established in the state man- 
agement table include the following four states: 

a. discrete only; 

b. discrete initially; 
20 c. bound only; and 

d. bound initially. 

[0203] The state "a. discretely only" represents con- 
tents (contents management units) that are allowed only 
25 in the discrete state, and cannot be changed to the 
bound state. 

[0204] The state "b. discrete initially" represents con- 
tents (contents management units) that are initially in 
the discrete state, but can be changed to the bound 
30 state. 

[0205] The state "c. bound only" represents contents 
(contents management units) that are allowed only in 
the bound state, and cannot be changed to the discrete 
state. 

35 [0206] The state "b. bound initially" represents con- 
tents (contents management units) that are initially in 
the bound state, but can be changed to the discrete 
state. 

[0207] The contents (contents management units) 
40 that are initially in the bound state assume that the con- 
tents are distributed in relation to information on the net- 
work. For example, these contents are based on the 
premise that they will be reproduced in combination with 
information on the network. 
45 [0208] The current state is established as either the 
discrete state or the bound state. 
[0209] The current state can be established for each 
contents management unit. There are available two 
state management processes for performing usage 
50 management of contents. According to the first process, 
the contents are always reset to the initial state when 
the recording medium is taken out of the home network. 
[0210] For example, if a contents storage recording 
medium includes a removable medium that can be re- 
55 moved from the reproducing device, then each of the 
contents is reset to the initial state at the time the re- 
movable medium is removed from the reproducing de- 
vice. At this time, the state management table stored 
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outside the recording medium is also initialized. 
[0211] According to the second process, the state of 
the recording medium is registered in an external man- 
agement server. In this case, the state management ta- 
ble stored outside the recording medium does not need 
to be initialized when the removable medium is removed 
from the reproducing device. 

[0212] When a removable medium which stores con- 
tents set to the bound state in a reproducing device con- 
nected to a home network (A) is loaded into a reproduc- 
ing device connected to a home network (B) that is con- 
structed in another home, for example, and the contents 
are to be set to the bound state, then the management 
server detects, based on the state management table, 
that the contents set to the bound state in the home net- 
work (A) are about to be redundantly set to the bound 
state in the home network (B), and does not permit the 
contents to be set to the bound state in the home net- 
work (B). 

[0213] The above management process is effective 
to prevent the same contents from being used as a plu- 
rality of contents in parallel. 

[021 4] The state management table as shown in FIG. 
10 may be held by the management server or the like 
to allow the current state to be referred to even when 
the removable medium is removed from the reproducing 
device and also to allow usage management of the con- 
tents to be performed based on the current state thus 
referred to. 

[0215] If the information recording medium is a re- 
cordable medium and records the current state, then 
since the current state is recorded on the recording me- 
dium, the current state can directly be read from the re- 
cording medium without confirming whether the con- 
tents are in the bound state or not through the server, 
and usage management of the contents can be per- 
formed based on the read current state. 
[0216] ROM mediums which inhibits data from being 
additionally recorded in a normal data area thereof 
should preferably have a partly recordable area therein 
for recording the above state management information. 
ROM mediums of such an arrangement should prefer- 
ably be used. 

[0217] Alternatively, it may be preferable to use opti- 
cal disc mediums that are additionally recordable, car- 
tridge mediums having IC memories, etc. 
[021 8] The state management table shown in FIG . 10 
may be integrally combined with or may be independent 
of thetable [unit arrangement and unit key management 
table] of contents management units (CPS units) and 
unit keys as shown in FIG. 4. 

[0219] The management information corresponding 
to the contents management units further includes in- 
formation as to reproduction and usage limitation of con- 
tents when the contents are in the discrete state, and 
information as to reproduction and usage limitation of 
contents when the contents are in the bound state. 
[0220] These contents management information is 



described as attribute information corresponding to the 
contents in the information recording medium, or record- 
ed in the management server which performs a contents 
management process. For those contents which are al- 
5 lowed to be used only in the bound state, it is possible 
to employ a contents usage management arrangement 
based on only the contents management information re- 
corded in the management server. 
[0221] An example of data of the contents manage- 
10 ment information will be described below with reference 
to FIG. 11. FIG. 11 shows an example of the arrange- 
ment of contents usage management information re- 
corded as fixed-length data, i.e., a contents playback 
and copy control information management table. The 
15 contents playback and copy control information man- 
agement table is established as an information table of 
data of each CPS unit or data of all CPS units. 
[0222] The contents playback and copy control infor- 
mation management table shown in FIG. 11 includes 
20 control information relative to usage and copying of con- 
tents in the form of fixed-length data ; such as contents 
management information depending on the state of con- 
tents, i.e., whether contents are in the discrete state or 
the bound state. 
25 [0223] In view of the usage of contents in the home 
network, the setting of the contents management infor- 
mation of the fixed length as shown in FIG. 11 is prefer- 
able. The management information in the discrete state 
represents, for example, whether contents can be re- 
30 produced in the discrete state or not. For contents that 
cannot be reproduced in the discrete state, a process of 
reproducing the contents is described. For example, the 
connection to a key distribution server, the need for an 
acquisition of key data distributed in another medium 
35 (memory card or the like), and information such as an 
URL or a telephone number for specifying a server, or 
an index value to a list storing such information is de- 
scribed. 

[0224] The management information in the bound 
40 state represents whether or not copying, streaming, and 
remote playback within a network are possible, the 
number of copies and expiration date for each of the 
types of devices in question, whether or not copying/ 
streaming data are present, a data conversion process, 
45 and the handling of copy data if the contents are no long- 
er in the bound state. 

[0225] Since FIG. 11 assumes that part or all of the 
above information is stored in a fixed-length field, data 
made up of a large number of characters such as the 
50 URL and data position (path information) are stored in 
another file, and an index to a list stored in the other file 
is stored in the fixed-length field. 
[0226] To make it possible to acquire playback oper- 
ation control information from a server, rather than using 
55 playback control information on the recording medium, 
and to operate according to the acquired playback op- 
eration control information, as indicated by a contents 
management information arrangement 501 in FIG. 11, 
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a flag indicative of the acquisition from the server and 
information indicative of how to access the server may 
be stored. 

[0227] By setting the above information as the con- 
tents management information, it is possible to perform 5 
a complex control process that cannot be expressed by 
fixed-length data and to change a control process after 
the recording medium is sold. 

[0228] FIG. 12 shows an example of the arrangement 
of contents usage management information established 10 
for each CPS unit, i.e., a contents playback and copy 
control information management table of contents play- 
back and copy control information recorded as variable- 
length data. 

[0229] Details of established information are the 15 
same as those shown in FIG. 11 . Since variable-length 
information can be included, data made up of a large 
number of characters such as the URL and data position 
(path information) can directly be described in the con- 
tents management information. Since the information is 20 
of a loop structure and a type 
(CCI_and_other_info_type in FIG. 12) is defined for 
each type of contents management information, a new 
copy control process that is subsequently added can 
easily be handled by defining a type and information 25 
(CCI_and_other_info_value and Additional_info in FIG. 
12) ancillary thereto. Unknown types of devices that 
were sold in the past may not be processed. 
[0230] It is possible to establish a structure wherein 
contents management information relative to the dis- 30 
crete state and the bound state is not divided, as shown 
in FIG. 12 at (A), and a structure wherein loops of con- 
tents management information are provided for the re- 
spective two states, as shown in FIG. 12'at (B). 
[0231] To make it possible to acquire playback oper- 35 
ation control information from a server, ratherthan using 
playback control information on the recording medium, 
and to operate according to the acquired playback op- 
eration control information, as indicated by a contents 
management information arrangement 502 in FIG. 12, 40 
a flag indicative of the acquisition from the server and 
information indicative of how to access the server may 
be stored. 

[0232] By setting the above information as the con- 
tents management information, it is possible to perform 45 
a complex control process that cannot be expressed by 
fixed-length data and to change a control process after 
the recording medium is sold. 

[0233] By establishing user definition information 503 
in the contents playback and copy control information so 
management table as shown in FIG. 12 and setting the 
type of user-definable control information as the user 
definition information 503, it is possible to realize a con- 
trol process beyond the range of standards belonging 
to the recording medium and a control process that can 55 
freely be defined by the contents distributor, for perform- 
ing contents playback control corresponding to individ- 
ual users, e.g., distinguishing between certain member- 



ship users and nonmembership users and allowing only 
the membership users to reproduce contents, or estab- 
lishing the definition of copy control information (CCI) 
not depending on the recording medium standard. 
[0234] A usage example of copy control information 
(CCI) based on the user definition is, for example, to es- 
tablish the definition of copy control information (CCI) 
not depending on the recording medium standard. 
[0235] Parameters of the copy control information 
(CCI) are determined by standards for each particular 
recording system (DVD standards or the like). Once re- 
producing devices compatible with such recording sys- 
tem become widely used, it is difficult to expand the copy 
control information (CCI). 

[0236] Therefore, optional control information which 
is not available as the copy control information (CCI) de- 
termined by the recording system is established as user 
definition information, and the contents owner or admin- 
istrator establishes unique copy control information 
(CCI). 

[0237] Since copy control information (CCI) that is 
uniquely established by the contents owner or adminis- 
trator cannot be interpreted by standards-compliant re- 
producing devices, an application (e.g., Java) for inter- 
preting copy control information (CCI) is made available 
from the recording medium or an external source such 
as a server or the like. By executing the application that 
is acquired, it is possible for the reproducing device to 
interpret u niquely defined copy control information (CCI) 
and control operation according to the CCI. 

[8. Storage arrangement of main contents, subcontents, 
and contents] 

[0238] A storage arrangement of main contents, sub- 
contents, and contents will be described below. 
[0239] An example of a directory arrangement for 
storing various contents management units (CPS units) 
described above and various management information, 
and a storage area for the management information will 
be described below with reference to FIG 13. A BDMV 
directory is a directory for storing application files in the 
Blu-ray Disc ROM format. 

[0240] In the directory arrangement shown in FIG. 13, 
main contents data area 511 is a directory storing data 
files of main contents in a plurality of layered arrange- 
ments according to the certain AV format described 
above with reference to FIGS. 2 and 3, i.e., contents 
according to the certain AV format (Blu-ray Disc ROM 
format) having a layered arrangement of applications, 
play lists, clips, etc., and also storing programs. 
[0241 ] These data files are stored in a user data area 
of the information recording medium. AV streams includ- 
ed in the clips are data files encrypted by unit keys that 
are established for respective contents management 
units (CPS units). 

[0242] A main contents management data area 512 
stores management files corresponding to the main 
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contents. The main contents management data area 
512 stores data files of tables, i.e., a table managing a 
contents management unit (CPS unit) arrangement and 
unit keys as shown in FIG. 4, i.e., the [unit arrangement 
and unit key management table], the [state manage- 5 
ment table] managing the discrete states and the bound 
states for the respective contents management units de- 
scribed above with reference to FIG. 10, and the [con- 
tents playback and copy control information manage- 
ment table] storing usage of contents and copy control 10 
information in the states described above with reference 
to FIGS. 11 and 12. These tables are stored as either 
individual data files or data files including a combination 
of tables. 

[0243] Asubcontentsdataarea513isadirectorystor- 15 
ing contents that do not belong to the main contents, i. 
e. contents not in accordance with the particular AV for- 
mat [Blu-ray Disc ROM format], i.e., contents belonging 
to the data groups shown in FIGS. 2 and 3. 
These data files are also stored in the user data area of 20 
the information recording medium. Contents belonging 
to the subcontents data area 513 may include both con- 
tents established as contents management units (CPS 
units) and contents not established as contents man- 
agement units (CPS units). The contents established as 25 
contents management units (CPS units) become data 
files encrypted with unit keys. 

[0244] A subcontents management data area 514 
stores managementfiles corresponding to subcontents. 
The subcontents management data area 51 4 stores da- 30 
ta files of tables, i.e., a table managing a contents man- 
agement unit (CPS unit) arrangement and unit keys as 
shown in FIG. 4, i.e., the [unit arrangement and unit key 
management table] , the [state management table] man- 
aging the discrete states and the bound states for the 35 
respective contents management units described 
above with reference to FIG. 10, and the [contents play- 
back and copy control information management table] 
storing usage of contents and copy control information 
in the states described above with reference to FIGS. 40 
11 and 12. 

[0245] Data group information 515 represents files 
storing data group information of subcontents. As 
shown in FIG. 13, paths of data files belonging to data 
groups 1 through N are registered. For opening subcon- 45 
tents, the data group information 515 is opened first to 
acquire the information of a group to which the desired 
contents belong, and then a data file can be specified 
based on the acquired information. 

[0246] If a group is established as a contents man- 50 
agement unit (CPS unit), it is encrypted with a unit key 
associated with each data group. If a data file belonging 
to a group established as a contents management unit 
(CPS unit) is to be used, then it is necessary to acquire 
a unit key and decrypt the data file with the unit key. 55 
These items of information can be acquired from man- 
agement files stored in the subcontents management 
data area 514. 



[0247] The subcontents data area 513 shown in FIG. 
13 is of an arrangement including a mixture of files be- 
longing to all data groups. As with a subcontents data 
area 521 shown in FIG. 14, for example, the subcon- 
tents data area 513 may have folders for data groups 
and may have an arrangement of files such as data be- 
longing to data groups and arranged under each of the 
data groups. 

[0248] In an arrangement shown in FIG. 14, data 
group information 522 is arranged as data representing 
directory names (folder names) corresponding to re- 
spective data groups. For opening subcontents, the da- 
ta group information 522 is opened first to acquire a di- 
rectory name as the information of a group to which de- 
sired contents belong, and the data file is acquired 
based on the acquired information. 
[0249] With the data storage arrangements shown in 
FIGS. 13 and 14, management information correspond- 
ing main contents and management information corre- 
sponding subcontents are established separately from 
each other. However, as shown in FIG. 1 5, for example, 
these management information may be established as 
files directly connected to routes, so that all the man- 
agement information corresponding to main contents 
and subcontents may be managed altogether. 
[0250] The directory arrangement shown in FIG. 15 
contains a main contents data area 551 , a subcontents 
data area 552, and a contents management data area 
553 corresponding to main contents and subcontents. 
[0251] The contents management data area 553 
stores management files corresponding to both main 
contents and subcontents. The contents management 
data area 553 stores data files of tables, i.e., a table 
managing a contents management unit (CPS unit) ar- 
rangement and unit keys as shown in FIG. 4, i.e., the 
[unit arrangement and unit key management table], the 
[state management table] managing the discrete states 
and the bound states for the respective contents man- 
agement units described above with reference to FIG. 
10, and the [contents playback and copy control infor- 
mation management table] storing usage of contents 
and copy control information in the states described 
above with reference to FIGS. 11 and 12. 
[0252] There are various storage patterns for main 
contents management data, subcontents management 
data, and contents management data including both of 
them. 

[0253] FIG. 16 shows an example of a storage ar- 
rangement for those management data. The manage- 
ment data are stored in one of patterns described below. 

(A) The management data are saved as a dedicated 
file in a user data area of the recording medium. 

(B) the management data are inserted in an AV for- 
mat file in a user data area of the recording medium. 
For example, management table data are inserted 
and stored in a title, index data file or an AV format 
file such as a play list or the like. 
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(C) the management data are stored in a physical 
area of the recording medium, i.e., an area that can- 
not directly be accessed by the user. 

(D) the management data are saved in an external 
server. 

[0254] The management data are stored in either one 
of the above patterns (A) through (D). 
[0255] The [unit arrangement and unit key manage- 
ment table], the [state managementtable], and the [con- 
tents playback and copy control information manage- 
ment table] have been described above as specific ex- 
amples of management data. All of these tables may not 
necessarily be stored in one pattern, but may be stored 
in respective different patterns. 

[0256] According to the above pattern (C), the above 
three types of information are saved in an area that can- 
not directly be accessed by the user, such as a lead-in 
area of the recording medium. According to the above 
pattern (D), the above three types of information are 
saved in an external server, rather than the recording 
medium. In this case, the reproducing device needs to 
acquire information corresponding to the three tables 
from the external surface before the recording medium 
is played back. 

[9. Encryption and falsification prevention processing 
arrangements for contents usage control information] 

[0257] Encryption and falsification prevention 
processing arrangements for contents usage control in- 
formation will be described below. 
[0258] First, a summary of a plurality of arrangements 
will be described below in (9-1 , and details of one spe- 
cific processing arrangement will be described below in 
(9-2). 

(9-1 ) Summary of encryption and falsification prevention 
processing arrangements for contents usage control 
information. 

[0259] First, a summary of encryption and falsification 
prevention processing arrangements for contents us- 
age control information will be described below. The 
contents usage control information corresponding to 
contents which correspond to the respective CPS units 
described above with reference to FIGS. 11 and 12, i. 
e., the [contents playback and copy control information 
managementtable] storing usage of contents and copy 
control information, should preferably be processed for 
antifalsification, and encrypted and stored. 
[0260] A process for preventing falsification of play- 
back/copy control information and a process of encrypt- 
ing playback/copy control information will be described 
below with reference to FIG. 17. 
[0261] As shown in FIG. 1 7, playback/copy control in- 
formation is combined with falsification verification data 
added thereto, and then encrypted and stored. 



[0262] For example, falsification verification data 1 . 
572 are established for playback/copy control informa- 
tion 1 , 571 corresponding to the CPS unit 1 . The falsifi- 
cation verification data may be established as hash data 
5 such as SHA-1 or the like, for example, based on the 
playback/copy control information or MAC (Message 
Authentication Code) based on the playback/copy con- 
trol information. 

[0263] The playback/copy control information 1 , 571 
10 with the falsification verification data 1 , 572 added there- 
to is encrypted based on a unit key corresponding to 
each CPS unit, and stored. 

[0264] The playback/copy control information may be 
stored in one of different patterns as follows: As shown 

15 in FIG. 17 at (A-1), a playback/copy control information 
file is established for each CPU unit. As shown in FIG. 
17 at (A-2), the control information of all CPU units is 
stored altogether as a single data file including fixed- 
length data described above with reference to FIG. 11 . 

20 As shown in FIG. 17 at (A-3), the control information of 
all CPU units is stored altogether as a single data file 
including variable-length data described above with ref- 
erence to FIG. 12. 

[0265] A sequence of a process for applying a hash 
25 function as falsification verification data will be de- 
scribed below with reference to FIG. 18. 
[0266] Hash values based on playback/copy control 
information 581 , 582 corresponding to respective CPS 
units are generated by a hash generating function 583 
30 such as SHA-1 or the like. 

[0267] The hash values are established as falsifica- 
tion verification data 584, 585 corresponding to the play- 
back/copy control information 581, 582 which corre- 
sponds to the respective CPS units, and unit keys Ku1 , 
35 Ku2 corresponding to the respective CPS units are ap- 
plied to joined data 586, 587 of the playback/copy con- 
trol information and the falsification verification data to 
encrypt them into storage files. 

[0268] A falsification prevention arrangement to 

40 which no hash function is applied will be described be- 
low with reference to FIG. 19. According to a process 
shown in FIG. 19, playback/copy control information 
591 , 592 corresponding to the respective CPS units is 
repeated and joined a plurality of times to establish 

45 joined data 593, 594. Then, unit keys Ku1 , Ku2 corre- 
sponding to the respective CPS units are applied to 
joined data 593, 594 to encrypt them into storage files. 
[0269] The encrypted data of the joined same data are 
established as storage files. When these storage files 

50 are decrypted with the unit keys Ku1 , Ku2, any falsifica- 
tion thereof can be verified based on whether a repeated 
pattern of the same data is detected or not. 
[0270] An information processing apparatus for per- 
forming a process of reproducing contents acquires en- 

55 crypted contents usage control information correspond- 
ing to contents management units (CPS units) stored in 
the information recording medium, i.e., playback/copy 
control information, performs a decryption process 



23 



45 



EP 1 538 621 A1 



46 



which applies unit keys established so as to correspond 
to contents management units, performs a falsification 
verification process, and then performs a contents us- 
age process based on the contents usage control infor- 
mation on the condition that no falsification is confirmed. 

(9-2) Specific example of encryption and falsification 
prevention processing arrangements for contents 
usage control information. 

[0271] Now, a specific example of encryption and fal- 
sification prevention processing arrangements will be 
described below. 

[0272] I n the specific example to be described below, 
playback/copy control information as contents usage 
control information is stored according to the pattern 
shown in FIG. 17 at (A-1), i.e., as established individual 
files corresponding to the playback/copy control infor- 
mation of the individual CPS units. 
[0273] An arrangement for encrypting playback/copy 
control information as contents usage control informa- 
tion will be described below with reference to FIG. 20. 
[0274] FIG. 20 is a diagram of an arrangement of data 
of contents usage control information recorded in the in- 
formation recording medium, i.e., a recorded arrange- 
ment of data making up individual files corresponding to 
playback/copy control information of the respective CPS 
units. 

[0275] FIG. 20 at (a) shows a recorded data arrange- 
ment in the information recording medium of the con- 
tents usage control information of a CPS unit 001. As 
shown, the recorded data has a plurality of data blocks 
each including 1 8-byte user control data (UCD) 601 and 
2048-byte user data 602 including contents usage con- 
trol information and hash data as falsification verification 
data. The number of data blocks that are used differs 
depending on the data length of the contents usage con- 
trol information. 

[0276] The contents usage control information of a 
CPU unit a shown in FIG. 20 at (a) is contents usage 
control information corresponding to one of a plurality of 
CPS units stored in the information recording medium. 
For example, the contents usage control information 
corresponds to contents usage control information 
[CPSUnit001 .cci] 61 0 of the CPS unit 001 , in a directory 
indicative of an overall data arrangement recorded in the 
information recording medium shown in FIG. 21 , for ex- 
ample. 

[0277] The directory arrangement shown in FIG. 21 is 
an arrangement including a content data area 612 and 
a contents management data area 611 corresponding 
to contents. A BDMV directory indicated in the content 
data area 612 is established as a directory storing con- 
tents and applications according to the Blu-ray Disc 
ROM format. 

[0278] As described above with reference to FIGS. 2 
and 3, the contents according to the Blu-ray Disc ROM 
format have a layered arrangement of titles, objects, 



play lists, clip information, AV streams, etc. Data files 
making up them are established in the BDMV directory. 
[0279] The contents management data area 611 
stores managementfiles corresponding to contents. For 

5 example, the contents management data area 611 
stores, with respect to each of the CPS units, unit key 
generation value information (Unit_Key_Gen_Value.inf) 
as information corresponding to the table managing 
CPU unit keys of the respective contents management 

10 units (CPS units) shown in FIG. 4, and contents usage 
control information (CPSUnitOOn.cci) as playback/copy 
control information of contents that are established for 
the respective units. 

[0280] A data arrangement of the unit key generation 
15 value information (Unit_Key_Gen_Value.inf) 609 will be 
described below with reference to FIG. 22. FIG. 22 
shows an example of the syntax of a u nit key generation 
value information (Unit_Key_Gen_Value.inf) file. The 
unit key generation value information file is a data file 
20 which defines information representative of association 
between contents management units and indexes, and 
random number information for use in the generation of 
unit keys. 

[0281] Specifically, the unit key generation value in- 
25 formation (Unit_Key_Gen_Value.inf) file is a file defining 
a first playback as playback contents to be activated 
when an information recording medium (disc) is loaded 
into the drive, indexes of a top menu as contents to be 
reproduced when a menu display function is activated, 
30 as described above with reference to FIGS. 5 through 
7, information associating titles as other indexes to CPS 
units, and random number (Vu) information for generat- 
ing keys assigned to the respective CPS units. 
[0282] The unit key generation value information 
35 (Unit_Key_Gen_Value.inf) includes the following data: 

(a) [CPS_Unit_number_for_First Play back] as infor- 
mation to designate a CPS unit No. corresponding 
to the first playback; 
40 (b) [CPS_Unit_number_for_TopMenu] as informa- 
tion to designate a CPS unit No. corresponding to 
the top menu; 

(c) [Number of Titles] as title number information; 

(d) [CPS_Unit_number for Title] as information to 
45 designate a CPS unit No. corresponding to each ti- 
tle; 

(e) [Number of CPSJJnits] as CPS unit number in- 
formation; and 

(f) [Unit Key Generation Value for CPSJJ nit] as ran- 
50 dom number (Vu) information for generating keys 

corresponding to the respective CPS units. 

[0283] If contents corresponding to the first playback 
are not stored, then [C PS_Unit_nu mber_for_ First PI ay- 
55 back=0] is set. If contents corresponding to the top 
menu are not stored, then [CPS_Unit_number_for_Top- 
Menu=0] is set. Respective CPS unit numbers are set 
in association with respective title numbers (Title#1 
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through Title# [Number_of_Titles]). 
[0284] The playback/copy control information of the 
contents is established as individual information of the 
respective CPS units. Specifically, individual usage con- 
trol information, as described below, is established for 5 
the respective CPS units stored in the information re- 
cording medium. 

[CPS unit 1] 

10 

[0285] The number of copies allowed forthe recording 
medium: a, the number of playbacks allowed: b, whether 
or not remote playback is possible: possible,—. 

[CPS unit 2] 15 

[0286] The number of copies allowed forthe recording 
medium: 0, the number of playbacks allowed: c, whether 
remote playback is possible or not: not possible, — . 
[0287] The contents usage control information 20 
[CPSUnit001 .cci] 610 shown in FIG. 21 is contents us- 
age control information corresponding to the CPS unit 
001 . Contents usage control information 
[CPSUnit002.cci] is contents usage control information 
corresponding to the CPS unit 002. 25 
[0288] These contents usage control information cor- 
respond to the contents stored in the respective CPS 
units, or specifically usage control information of clip AV 
stream data 613, 614, 615 in the directory shown in FIG. 
21. 30 
[0289] FIG. 23 shows a contents arrangement ac- 
cording to the Blu-ray Disc ROM format illustrative of an 
association between these AV streams and CPS units. 
The clip AV stream data 613,614,615 shown in FIG . 21 
correspond respectively to AV stream data 613, 614, 35 
615 shown in FIG. 23. 

[0290] Specifically, the clip AV stream data 613, 614 
are data belonging to a CPS unit #1, and the clip AV 
stream data 615 are data belonging to a CPS unit #2. 
[0291] Therefore, contents playback control informa- 40 
tion of the clip AV stream data 613, 614 is a contents 
playback control information file established in associa- 
tion with the CPS unit 001, e.g., the contents usagecon- 
trol information [CPSUnit001 .cci] 61 0 shown in FIG. 21 , 
and contents playback control information of the clip AV 45 
stream data 61 5 is a contents playback control informa- 
tion file established in association with the CPS unit 002, 
e.g., the contents usage control information 
[CPSUnit002.cci] shown in FIG. 21. 

[0292] When the information processing apparatus is 50 
to use contents contained in either one of CPS units, the 
information processing apparatus reads the contents 
usage control information corresponding to the CPS 
unit, and performs a usage process according to the 
read control information. 55 
[0293] The recorded arrangement of the contents us- 
age control information will further be described below 
with reference to FIG. 20. The 1 8-byte user control data 



(UCD) 601 in the recorded data shown in FIG. 20 at (a) 
are control data that are established for each 2048-byte 
user data 602, and include control data such as play- 
back control information. The playback/copy control in- 
formation forthe respective CPS units and hash values 
as falsification verification data therefor are stored in the 
user data 602. 

[0294] Each data block is subjected to block encryp- 
tion applying a block key kb that is generated by a block 
seed 603 set in the block and a unit key Ku correspond- 
ing to each contents management unit (CPS unit). 
[0295] A block encryption process using the block key 
Kb will be described below with reference to FIG. 24. 
User data 621 shown in FIG. 24 represent user data 
(2048 bytes) in one data block. The usage data are data 
including playback/copy control information for each 
CPS unit. 

[0296] In the block encryption process, a block seed 
having a predetermined length is extracted from the us- 
er data (2048 bytes) in one data block, and a block key 
Kb is generated by an encryption process based on the 
block seed and the unit key Ku. The data portion exclu- 
sive of the block seed are then encrypted usingthe block 
key Kb. 

[0297] In the illustrated example, 1 6-byte data are ex- 
tracted from the beginning of the user data, and the ex- 
tracted 1 6-byte data are applied as a block seed 622. 
[0298] As shown in FIG. 24, the 16-byte block seed 
622 from the beginning of the user data is subjected to 
an encryption process, specifically, an AES encryption 
process, for example, based on a CPS unit key Ku-a 
623, generating a block key Kb 624 in step S11 . 
[0299] The CPS unit key Ku-a 623 that is applied is 
the unit key of a unit corresponding to the contents us- 
age control information that is subjected to the block en- 
cryption. If the contents usage control information that 
is subjected to the block encryption represents control 
data for the CPS unit a, then the unit key Ku-a corre- 
sponding to the CPS unit a is applied. In this manner, a 
different unit key established for each CPS unit is ap- 
plied to generate a block key. 

[0300] After the block key Kb 624 is generated in step 
S11 , the data portion of the user data 621 exclusive of 
the 1 6 bytes of the block seed 622, i.e., a2032-bytedata 
area, is subjected to an encryption process, e.g., an 
AES encryption process, by applying the block key Kb 
624. 

[0301] According to this block encryption, the 
2048-byte user data serving as the block data are es- 
tablished as the 1 6-byte block seed 622 which is not en- 
crypted and the 2032-byte data encrypted by the block 
key Kb 624. These data are recorded in the information 
recording medium. 

[0302] The block seed is extracted from the user data, 
and is established as different data for each block. 
Therefore, even though the common CPS unit key Ku 
is applied, the block key Kb is different for each block, 
and hence the encryption process is performed with 
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higher security. 

[0303] A sequence of decrypting data that have been 
subjected to the block encryption will be described be- 
low with reference to FIG. 25. 2048-byte user data 631 
shown in FIG. 25 are data that have been subjected to 
the block encryption described above with reference to 
FIG. 24, and are made up of a 16-byte block seed 632 
which is not encrypted and 2032-byte data 633 encrypt- 
ed by a block key Kb. 

[0304] As shown in FIG. 25, the 16-byte block seed 
632 from the beginning of the user data is subjected to 
an encryption process, specifically, an AES encryption 
process, based on a CPS unit key Ku-a 634, generating 
a block key Kb 635 in step S21 . 

[0305] The CPS unit key Ku-a 634 that is applied is 
the unit key of a unit corresponding to the contents us- 
age control information that is subjected to the block en- 
cryption. If the contents usage control information that 
is subjected to the block encryption represents control 
data for the CPS unit a, then the unit key Ku-a corre- 
sponding to the CPS unit a is applied. 
[0306] After the block key Kb 635 is generated in step 
S21 , the data portion of the user data 631 exclusive of 
the 16 bytes of the block seed 632, i.e., the 2032-byte 
encrypted data 633, is subjected to a decryption proc- 
ess, e.g., an AES decryption process, by applying the 
block key Kb 635. 

[0307] According to this block encryption, the 
2048-byte user data serving as the block data are made 
up of the 1 6-byte block seed 622 which is not encrypted 
and the 2032-byte data decrypted by the block key Kb 
635. These data represent contents usage control infor- 
mation corresponding to a certain CPS unit. The infor- 
mation processing apparatus for reproducing and using 
contents uses contents according to the contents usage 
control information. 

[0308] In FIGS. 24 and 25, the encryption and decryp- 
tion processes for one block have been described. As 
described above with reference to FIG. 20. CPS-asso- 
ciated contents usage control information is recorded 
using a plurality of blocks depending on the length there- 
of. Therefore, for recording and reproducing CPS-asso- 
ciated contents usage control information . the process 
per block described above with reference to FIGS. 24 
and 25 is performed on a plurality of blocks. 
[0309] FIG. 26 shows an overall recorded data ar- 
rangement of contents usage control information corre- 
sponding to a certain single CPS unit a. The contents 
usage control information is divided and stored in the 
user data areas of a plurality of block data. In the exam- 
ple shown in FIG. 26, the user data of first through nth 
n blocks are used. 

[031 0] 1 6 bytes from the beginning of the user data of 
each block are extracted as a seed, and an encryption 
process is performed by applying a unit key Kua 651 to 
the extracted seed to generate a block key. 
[0311] Specifically, with respect to the first block, an 
encryption process is performed by applying a seed 1 



and the unit key Kua 651 to generate a block key Kb1 , 
and the block key Kb1 is applied to encrypt the data area 
of the user data exclusive of the seed. Similarly, with 
respect to the second block, an encryption process is 

5 performed by applying a seed 2 and the unit key Kua 
651 to generate a block key Kb2, and the block key Kb2 
is applied to encrypt the data area of the user data ex- 
clusive of the seed. The same process is carried out on 
all the blocks to generate recorded data. 

10 [0312] An example of a recorded contents usage con- 
trol information file corresponding to a single contents 
management units (CPS unit) and an example of hash 
values set as falsification verification data will be de- 
scribed below with reference to FIG. 27. 

15 [031 3] As described above with reference to FIGS. 20 
through 26, contents usage control information as play- 
back/copy control information for each CPS unit is di- 
vided and stored in the 2048-byte user data areas of 
block data. 

20 [0314] FIG. 27 shows a first block 701 as a 2048-byte 
user data area serving as block data storing contents 
usage control information, and a succeeding block 702. 
The succeeding block 702 includes one or more blocks. 
It is assumed that the succeeding block 702 contains 
25 user data of N blocks, and contains data of 2048 x N. 
[0315] The first block 701 contains user data having 
a total number of bytes: 2048 bytes, and stores the re- 
spective data of: 

30 a. first header: 1 6 bytes; 

b. first control information (CCI) area: 2012 bytes; 
and 

c. first hash value: 20 bytes. 

35 [0316] The first header (16 bytes) contains informa- 
tion as to the number of loops of contents usage control 
information (playback/copy control information) con- 
tained in the first control information (CCI) area and a 
reserved area. The data in the first header (1 6 bytes) is 

40 used as seed information for generating a block key cor- 
responding to this block. 

[0317] As described above with reference to FIGS. 20 
through 26 ; since the seed information is not subjected 
to block encryption, it is stored as plaintext data in the 

45 information recording medium. Therefore, if contents 
usage control information as playback/copy control in- 
formation for each CPS unit is included in the 16-byte 
data at the beginning of the user data area of the block 
data used as the seed information, then the specific de- 

50 tails of the control information may possibly leak out. 
Therefore, the 1 6-byte area at the beginning of the user 
data area is established as a header information area 
for storing data of lower confidentiality. 
[0318] The first control information (CCI) area (2012 

55 bytes) following the header stores contents usage con- 
trol information as playback/copy control information 
corresponding to each CPS unit. 
[0319] FIG. 27 shows the contents usage control in- 
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formation (playback/copy control information) of the first 
block 701 as including two types of control information, 
i.e., 

basic control information (Basic CCI), and 
extended control information (Extended CCI). 
[0320] In the example shown in FIG. 27, the first con- 
trol information (CCI) area stores one item of basic con- 
trol information (Basic CCI) and four items A through D 
of extended control information (Extended CCI). 
[0321] The basic control information (Basic CCI) rep- 
resents data comprising basic minimum contents usage 
control information. The basic control information (Basic 
CCI) is read by almost all information processing appa- 
ratus which perform a contents playback process ac- 
cording to a predetermined contents playback process- 
ing program, and the information processing apparatus 
are required to perform a process according to the con- 
trol information. The extended control information (Ex- 
tended CCI) represents data comprising extended con- 
tents usage control information (playback/copy control 
information) applicable to information processing appa- 
ratus which have processing functions such as higher- 
level contents usage processes, e.g., network transfer 
and streaming transmission and reception of data. 
[0322] The basic control information (Basic CCI) is re- 
quired to be quickly removed from a playback/copy con- 
trol information storage file. For storing the extended 
control information (Extended CCI), there is employed 
a storage process which poses less limitations on size 
or the like for future extension . Specific examples of the 
basic control information (Basic CCI) and the extended 
control information (Extended CCI) are shown in FIG. 
28. 

[0323] As shown in FIG. 28, the basic control informa- 
tion (Basic CCI) includes the following control informa- 
tion, for example: 

copy able/uncopy able information: copyable/unco- 
pyable/copyablefor one generation only; video out- 
put resolution limit information: output limit/no out- 
put limit; 

analog copy control information: analog copy posi- 
tion/impossible (designation of analog copy preven- 
tion technique); 

information on whether or not there is encryption: 
encryption/no encryption; and 
information on whether or not there is claim of 
rights: claim or rights/no claim of rights. 

[0324] The extended control information (Extended 
CCI) includes the following control information, for ex- 
ample: 

playable/unplayable information on a single infor- 
mation recording medium (disc): indicates whether 
or not contents playback is possible only with infor- 
mation on an information recording medium (disc); 
method of playing contents unplayable on a single 



information recording medium (disc): "connection to 
a key distribution server", "insertion of a memory 
card with key", etc.; 

server designation: an index value to a server list; 

5 copying and streaming compatibility information: 
compatibility information for playing back contents 
on another intranetwork device; and 
data conversion process upon copying and stream- 
ing: a process usable for converting contents to 

10 those for another device. 

[0325] The extended control information (Extended 
CCI) further includes the following control information: 

15 copy limitation information as to whether copyable 
to intranetwork recording medium of same type or 
not, etc.; 

copy limitation information as to whether or not cop- 
yable to portable unit, etc.; 
20 information as to whether or not streaming and re- 
mote playback are possible, etc.; 
information as to a downloading process; and 
information for acquiring operation control informa- 
tion from a server. 

25 

[0326] The extended control information (Extended 
CCI) may be set to any optional control information. 
[0327] The data making up the first block 701 as the 
2048-byte user data area serving as block data storing 
30 contents usage control information will further be de- 
scribed below with reference to FIG. 27. 
[0328] The first block 701 stores a first hash value (20 
bytes) generated based on each of the data of: 

35 a. first header: 1 6 bytes; and 

b. first control information (CCI) area: 2012 bytes. 

[0329] The hash value represents data generated by 
applying a hash function such as SHA-1 or the like to 

40 the data of the first header and the data of the first con- 
trol information (CCI) area, and is established as falsifi- 
cation verification data for the data of the first header 
and the data of the first control information (CCI) area. 
[0330] The size of the hash value differs depending 

45 on the hash function used. In FIG. 27, the hash function 
SHA-1 is used and the hash value of 1 60 bits (20 bytes) 
is generated. However, a different hash function and a 
different hash value length may be employed. The first 
hash value is obtained by inputting, to the hash function, 

50 data ranging from the beginning of the file to a position 
immediately prior to the area where the hash value is 
recorded (if SHA-1 is used, a 2028-byte area from the 
beginning). 

[0331] An information processing apparatus for read- 
55 jng contents usage control information and performing 
contents usage according to the usage control informa- 
tion calculates a hash value based on the data of the 
first header and the data of the first control information 
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(CCI) area, and compares the calculated hash value 
with a hash value stored in the user data area of the 
block data. If the compared hash values agree with each 
other, then the information processing apparatus deter- 
mines that there is no falsification, and continues its 
processing. If the compared hash values do not agree 
with each other, then the information processing appa- 
ratus determines that there is falsification, and stops re- 
producing and using the contents according to the con- 
tents usage control information. 

[0332] The succeeding block 702 shown in FIG. 27 
contains user data of N blocks, and contains data of 
2048 x N bytes. 

[0333] The user data of the succeeding block 702 
store the respective data of: 

a. second header: 16 bytes; 

b. second control information (CCI) area: arbitrary 
bytes; and 

c. overall hash value: 20 bytes. 

[0334] The second header: 16 bytes includes 16 
bytes from the beginning of the user data of a second 
blockfollowingthefirst block 701 , and contains informa- 
tion as to the number of loops of contents usage control 
information (playback/copy control information) con- 
tained in the second control information (CCI) area and 
a reserved area. The data in the second header (16 
bytes) is used as seed information for generating a block 
key corresponding to 2048 bytes at the beginning of the 
second block. 

[0335] The second control information (CCI) area: ar- 
bitrary bytes is established as an area for storing a plu- 
rality of contents usage control information (playback/ 
copy control information) in a range not exceeding (2048 
x N - (1 6 + 20)) bytes which are produced by removing 
the header and the data portion of the overall hash value 
from the data size (2048 x N) bytes of the succeeding 
block 702. In the example shown in FIG. 27, the second 
control information (CCI) area stores a total of five infor- 
mation blocks E through I of extended control informa- 
tion (Extended CCI). 

[0336] If the succeeding block 702 uses a plurality of 
blocks, then the 1 6-bytedata atthe beginning of the user 
data of each block serve as a seed area as block key 
generation information for each block. The seed area is 
arranged to store either arrangement data of contents 
usage control information (playback/copy control infor- 
mation) or the same information as the second header 
or dummy data. 

[0337] The overall hash value: 20 bytes stores an 
overall hash value (20 bytes) generated based on all of 
the following data: 

the overall data of the first block 701 ; 

the second header of the succeeding block 702: 1 6 

bytes; and 

the second control information (CCI) area: arbitrary 



bytes. 

[0338] The overall hash value is generated by apply- 
ing a hash function such as SHA-1 orthe like to the over- 

5 all data of the first block 701 , the second header of the 
succeeding block 702, and the overall data of the sec- 
ond control information (CCI), and is established as fal- 
sification verification data for the overall data of the first 
block 701 , the second header of the succeeding block 

10 702, and the overall data of the second control informa- 
tion (CCI). 

[0339] The size of the hash value differs depending 
on the hash function used. In FIG. 27, the hash function 
SHA-1 is used and the hash value of 1 60 bits (20 bytes) 

15 is generated. However, a different hash function and a 
different hash value length may be employed. The over- 
all hash value is obtained by inputting, to the hash func- 
tion, data ranging from the beginning of the file to a po- 
sition immediately priorto the area where the hash value 

20 is recorded (if SHA-1 is used, a [file size - 20]-byte area 
from the beginning). 

[0340] Of information processing apparatus for read- 
ing contents usage control information and performing 
contents usage according to the usage control informa- 
25 tion, an apparatus for performing higher-level contents 
usage processes according to the extended control in- 
formation does not verify the hash value of the first 
block, but performs a data falsification verification proc- 
ess based on the overall hash value. 
30 [0341] Specifically, the information processing appa- 
ratus for performing contents usage calculates a hash 
value based on the overall data of the first block 701 , 
the data of the second header and the second control 
information (CCI) of the succeeding block 702, and com- 
35 pares the calculated hash value with a hash value stored 
in the user data area of the succeeding block 702. If the 
compared hash values agree with each other then the 
information processing apparatus determines that there 
is no falsification, and continues its processing. If the 
40 compared hash values do not agree with each other 
then the information processing apparatus determines 
that there is falsification, and stops reproducing and us- 
ing the contents according to the contents usage control 
information. 

45 [0342] An apparatus which uses higher-level contents 
and performs higher-level contents usage processes 
according to the extended control information calculates 
a hash value based on the data contained in not only 
the first block but also succeeding blocks from the sec- 
50 ond block, and compares the calculated hash value with 
the overall hash value. An apparatus which does not use 
higher-level contents and but performs higher-level con- 
tents usage processes according to only the basic con- 
trol information may calculate a hash value based on 
55 the information set in the first block 701 , and compare 
the calculated hash value with the first hash value set 
in the first block 701. 

[0343] The stored arrangement of the contents usage 
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control information and the hash value setting arrange- 
ment shown in FIG. 27 offer the following three advan- 
tages: 

(1) It makes it possible to acquire and verify basic 
control information by generating and decrypting a 
block key of 2048 bytes (first block) at the beginning 
and verifying falsification based on a comparison of 
hash values. 

(2) If the size of extended control information is 
small, then also the extended control information is 
stored in 2048 bytes (first block) at the beginning to 
make it possible to acquire and verify basic control 
information and extended control information by 
generating and decrypting a block key of 2048 bytes 
(first block) at the beginning and verifying falsifica- 
tion based on a comparison of hash values. 

(3) If the size of extended control information is 
large, then it is possible to store contents usage 
control information using a succeeding block from 
the second block. 

[0344] FIG. 29 is a diagram showing a syntax corre- 
sponding to a stored example of the contents usage 
control information shown in FIG. 27. 
[0345] There are first block area data 721 made up of 
2048 bytes at the beginning and succeeding block area 
data 722 following the first block area data 721 and hav- 
ing a size which is an integral multiple of 2048 bytes. 
[0346] The first block area data 721 establish therein, 
as header information: 

[Number_of_Primary_CCI_loop] as information in- 
dicative of the number of information blocks (loops) 
serving as contents usage control information (play- 
back/copy control information) described in the first 
block area: 1 6 bits; and 
a reserved areas: 112 bits. 

[0347] The above data are 1 6-byte data of the header. 
[0348] The first block area data 721 also establish 
therein, as first control information (CCI) area informa- 
tion: 

[CCI_and_other_info_type] as data type informa- 
tion of contents usage control information (play- 
back/copy control information): 16 bits; 

[CCI_and_other_info datajength] as data length 

information of contents usage control information 
(playback/copy control information): 16 bits; 
[CCI_and_other_info_data] as data value informa- 
tion of contents usage control information (play- 
back/copy control information): (CCI_and_other_ 
info_data_length x 8) bits; and 
a reserved areas: X bits. 

[0349] Furthermore, the first block area data 721 es- 
tablish therein: 



[Hash_value_for_Primary_CCI] as a hash value 
calculated based on the above first block arrange- 
ment data: 1 60 bits. 

5 [0350] The succeeding block area data 722 are of 
substantially the same data arrangement as the first 
block area, and establish therein a header made up of 
information indicative of the number of loops and a re- 
served area, a contents usage control information (play- 

10 back/copy control information) area including a data 
type, a data length, and a data value, a reversed area, 
and an overall hash value [Hash_value_for_AII_CCI] ; 
160 bits. 

[0351] The overall hash value [Hash_value_for_AII_ 
15 CCI]: 160 bits is a hash value generated based on the 
overall first block area data 721 and the succeeding 
block area data 722 except for the overall hash value. 
[0352] A example of a recorded contents usage con- 
trol information file different from that shown in FIG. 27, 
20 and an example of a hash value set as falsification ver- 
ification data will be described below with reference to 
FIG. 30. 

[0353] In the example of the recorded contents usage 
control information file shown in FIG. 27, the first block 

25 area stores therein both basic control information and 
extended control information. In the example shown in 
FIG. 30, however, the first block serves as an area stor- 
ing only basic control information, and all extended con- 
trol information is stored in a succeeding block from the 

30 second block. 

[0354] The arrangement of the recorded contents us- 
age control information file in the present example will 
be described below with reference to FIG. 30. 
[0355] FIG. 30 shows a first block 751 as a 2048-byte 

35 user data area serving as block data storing contents 
usage control information, and a succeeding block 752. 
The succeeding block 752 includes one or more blocks. 
It is assumed that the succeeding block 752 contains 
user data of N blocks, and contains data of 2048 x N. 

40 [0356] The first block 751 contains user data having 
a total number of bytes: 2048 bytes, and stores the re- 
spective data of: 

a. basic header: 1 6 bytes; 
45 b. basic control information (CCI) area: 2012 bytes; 
and 

c. basic hash value: 20 bytes. 

[0357] The basic header (16 bytes) contains informa- 
50 tion as to the number of loops of contents usage control 
information (playback/copy control information) con- 
tained in the basic control information (CCI) area of the 
first block 751 and a reserved area. The data in the basic 
header (16 bytes) is used as seed information for gen- 
55 erating a block key corresponding to this block. 

[0358] The basic control information (CCI) area (2012 
bytes) following the header storing only basic control in- 
formation (Basic CCI) in contents usage control infor- 
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mation (playback/copy control information) correspond- 
ing to each CPS unit. Extended control information (Ex- 
tended CCI) is not stored in the first block 751 , but stored 
in its entirety in the succeeding block 752. In the illus- 
trated example, the first block 751 stores a total of five 
information blocks A through E of basic control informa- 
tion (Basic CCI). 

[0359] As described above, the basic control informa- 
tion (Basic CCI) represents data comprising basic min- 
imum contents usage control information (playback/ 
copy control information). The basic control information 
(Basic CCI) is read by almost all information processing 
apparatus which perform a contents playback process 
according to a predetermined contents playback 
processing program, and the information processing ap- 
paratus are required to perform a process according to 
the control information. 

[0360] The first block 571 further stores therein a ba- 
sic hash value (20 bytes) generated based on the data 
of the basic header (16 bytes) and the basic control in- 
formation (CCI) area: 2012 bytes. The hash value rep- 
resents data generated by applying a hash function 
such as SHA-1 to the data of the basic header and the 
data of the basic control information (CCI) data, and is 
established as falsification verification data forthese da- 
ta. The size of the hash value differs depending on the 
hash function used. In FIG. 30, the hash function SHA- 
1 is used and the hash value of 160 bits (20 bytes) is 
generated. However, a different hash function and a dif- 
ferent hash value length may be employed. The first 
hash value is obtained by inputting, to the hash function, 
data ranging from the beginning of the file to a position 
immediately prior to the area where the hash value is 
recorded (if SHA-1 is used, a 2028-byte area from the 
beginning). 

[0361] An information processing apparatus for per- 
forming contents usage based on only the basic control 
information calculates a hash value based on the data 
of the basic header and the data of the basic control 
information (CCI) area, and compares the calculated 
hash value with a hash value stored in the user data 
area of the block data. If the compared hash values 
agree with each other, then the information processing 
apparatus determines that there is no falsification, and 
continues its processing. If the compared hash values 
do not agree with each other, then the information 
processing apparatus determines that there is falsifica- 
tion, and stops reproducing and using the contents ac- 
cording to the contents usage control information. 
[0362] The information processing apparatus for per- 
forming contents usage based on only the basic control 
information is not required to perform processes such 
as the reading of information and the calculation of a 
hash value for the second block and following blocks, 
and hence can process data efficiently. 
[0363] The succeeding block 752 shown in FIG. 30 
contains user data of N blocks, and contains data of 
2048 X N bytes. 



[0364] The user data of the succeeding block 752 
store the respective data of: 

a. extended header: 16 bytes; 
5 b. extended control information (CCI) area: arbitrary 
bytes; and 

c. overall hash value: 20 bytes. 

[0365] The extended header: 16 bytes comprises 16 
10 bytes from the beginning of the user data of a second 
block following the first block 751 , and contains informa- 
tion as to the number of loops of contents usage control 
information (playback/copy control information) con- 
tained in the extended control information (CCI) area 
15 and a reserved area. The data in the extended header 
(1 6 bytes) is used as seed information for generating a 
block key corresponding to the second block. 
[0366] The extended control information (CCI) area: 
arbitrary bytes is established as an area for storing a 
20 plurality of contents usage control information (play- 
back/copy control information) in a range not exceeding 
(2048 x N - (16 +- 20)) bytes which are produced by 
removing the header and the data portion of the overall 
hash value from the data size (2048 x N) bytes of the 
25 succeeding block 752. The succeeding block 752 only 
includes the extended control information except for the 
basic control information stored in the first block 751 . In 
the example shown in FIG. 30, the extended control in- 
formation (Extended CCI) area stores a total of five in- 
30 formation blocks A through E. 

[0367] If the succeeding block 752 uses a plurality of 
blocks to store the extended control information, then 
the 16-byte data at the beginning of the user data of 
each block serve as a seed area as block key generation 
35 information for each block. The seed area is arranged 
to store either arrangement data of contents usage con- 
trol information (playback/copy control information) or 
the same information as the extended header at the be- 
ginning of the second header or dummy data. 
40 [0368] The overall hash value: 20 bytes stores an 
overall hash value (20 bytes) generated based on all of 
the following data: 

the overall data of the first block 751 ; 
45 the extended header of the succeeding block 752: 
1 6 bytes; and 

the extended control information (CCI) area: arbi- 
trary bytes. 

50 [0369] The overall hash value is generated by apply- 
ing a hash function such as SHA-1 to the overall data of 
the first block 751 , the extended header of the succeed- 
ing block 752, and the overall data of the extended con- 
trol information (CCI), and is established as falsification 
55 verification data forthe overall data of the first block 751 , 
the extended header of the succeeding block 752, and 
the overall data of the extended control information 
(CCI). The size of the hash value differs depending on 
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the hash function used. In FIG. 30, the hash function 
SHA-1 is used and the hash value of 1 60 bits (20 bytes) 
is generated. However, a different hash function and a 
different hash value length may be employed. 
[0370] Of information processing apparatus for read- 5 
ing contents usage control information and performing 
contents usage according to the usage control informa- 
tion, an apparatus for performing higher-level contents 
usage processes according to the extended control in- 
formation does not verify the hash value of the first 10 
block, but performs a data falsification verification proc- 
ess based on the overall hash value. Only if the infor- 
mation processing apparatus determines that there is 
no falsification, it continues its processing to use con- 
tents. If the information processing apparatus deter- 15 
mines that there is falsification, then itstops reproducing 
and using the contents according to the contents usage 
control information. 

[0371] With the arrangement according to the present 
embodiment, the information processing apparatus for 20 
using contents according to the basic control informa- 
tion is required to decrypt and verify, based on a hash 
value, only the data of the first block 751 , and can dis- 
pense with processes of decrypting, calculating a hash 
value for, and verifying the succeeding block 752. The 25 
information processing apparatus can therefore perform 
its processing efficiently. 

[0372] FIG. 31 is a diagram showing a syntax corre- 
sponding to a stored example of the contents usage 
control information shown in FIG. 30. 30 
[0373] There are first block area data 771 made up of 
2048 bytes at the beginning and succeeding block area 
data 772 following the first block area data 771 and hav- 
ing a size which is an integral multiple of 2048 bytes. 
[0374] The first block area data 771 establish therein, 35 
as header information: 

[Number_of_Basic_CCI_loop] as information indic- 
ative of the number of information blocks (loops) 
serving as contents usage control information (play- 40 
back/copy control information) described in the ba- 
sic control information (CCI) area: 16 bits; and 
a reserved areas: 112 bits. 

[0375] The above data are 1 6-byte data of the header. 45 
[0376] The first block area data 771 establish therein, 
as the basic control information (CCI) area information: 



60 

a reserved areas: X bits. 

[0377] Furthermore, the first block area data 771 es- 
tablish therein: 

[Hash_value_for_Basic_CCI] as a hash value cal- 
culated based on the above first block arrangement 
data: 160 bits. 

[0378] The succeeding block area data 772 are of 
substantially the same data arrangement as the first 
block area, and establish therein a header made up of 
information indicative of the number of loops and a re- 
served area, a contents usage control information (play- 
back/copy control information) area including a data 
type, a data length, and a data value, a reversed area, 
and an overall hash value [Hash_value_for_AII_CCI]: 
160 bits. 

[0379] The overall hash value [Hash_value_for_AII_ 
CCI]: 160 bits is a hash value generated based on the 
overall first block area data 771 and the succeeding 
block area data 772 except for the overall hash value. 
[0380] As described above, the contents usage con- 
trol information (playback/copy control information) in- 
cludes basic control information (Basic CCI) and ex- 
tended control information (Extended CCI). The basic 
control information (Basic CCI) represents data com- 
prising basic minimum contents usage control informa- 
tion (playback/copy control information). The basic con- 
trol information (Basic CCI) is read by almost all infor- 
mation processing apparatus which perform a contents 
playback process according to a predetermined con- 
tents playback processing program, and the information 
processing apparatus are required to perform a process 
according to the control information. The extended con- 
trol information (Extended CCI) represents data com- 
prising extended contents usage control information 
(playback/copy control information) applicable to infor- 
mation processing apparatus which have processing 
functions such as higher-level contents usage process- 
es, e.g., network transfer and streaming transmission 
and reception of data. 

[0381] A processing sequence of an information 
processing apparatus for reading contents usage con- 
trol information (playback/copy control information) in 
different categories from an information recording me- 
dium and performing processes according to the control 
information will be described below with reference to 
FIGS. 32 and 33. 

[0382] FIG. 32 shows a processing sequence of an 
information processing apparatus for reading only basic 
control information and performing contents usage ac- 
cording to the basic control information. 
[0383] In step S101, the information processing ap- 
paratus selects a contents control information file (CCI 
file) corresponding to a certain CPS unit, and reads 
2048 bytes from the beginning of a data area which cor- 
responds to a first block of the file. 



[CCI_and_other_info_type] as data type informa- 
tion of contents usage control information (play- 50 
back/copy control information): 16 bits; 
[CCI_and_other_info_data_length] as data length 
information of contents usage control information 
(playback/copy control information): 16 bits; 
[CCI_and_other_info_data] as data value informa- 55 
tion of contents usage control information (play- 
back/copy control information): (CCI_and_other_ 
info_data_length x 8) bits; and 
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[0384] In step S102, the information processing ap- 
paratus acquires 1 6 bytesfrom the beginning of the read 
2048-byte data of the first block, and performs a key 
generation process by applying an encryption process, 
e.g., an AES encryption process, based on a CPS unit 
key on the acquired 1 6 bytes as a seed, thereby gener- 
ating a block key Kb. The CPS unit key applied here is 
a CPS unit key corresponding to a contents manage- 
ment unit (CPS unit) that is associated with the contents 
control information file (CCI file) that is selected. 
[0385] In step S103, the information processing ap- 
paratus applies the generated block key Kb to perform 
a decryption process on the block-encrypted data area 
of the read 2048-byte data of the first block exclusive of 
the 16 bytes at the beginning. For example, the infor- 
mation processing apparatus performs a decryption 
process according to an AES encryption algorithm. 
[0386] In step S104, the information processing ap- 
paratus calculates a hash value X based on the 
2028-byte data of the decrypted block data exclusive of 
20 bytes. At this time, SHA-1 . for example, is applied as 
a hash value calculating algorithm. 
[0387] In step S105, the information processing ap- 
paratus compares the calculated hash value with the 
hash value (the 20-byte data from the 2028th byte to the 
2047th byte of the block data) written in the block data. 
[0388] If the calculated hash value and the read hash 
value do not agree with each other, then control goes to 
step S107 in which the information processing appara- 
tus determines that there is falsification, and stops using 
contents according to contents control information. 
[0389] If the calculated hash value and the read hash 
value agree with each other, then control goes to step 
S1 06 in which the information processing apparatus de- 
termines that there is no falsification, and acquires con- 
tents control information and uses contents according 
to the contents control information. In this case, the con- 
trol information comprises basic control information, and 
the information processing apparatus performs a con- 
tents usage process according to the basic control in- 
formation. 

[0390] FIG. 33 shows a processing sequence of an 
information processing apparatus for reading both basic 
control information and extended control information 
and performing contents usage according to the basic 
control information and the extended control informa- 
tion. 

[0391] In step S201, the information processing ap- 
paratus selects a contents control information file (CCI 
file) corresponding to a certain CPS unit, and reads 
2048 bytes from the beginning of a data area which cor- 
responds to a first block of the file. 
[0392] In step S202, the information processing ap- 
paratus acquires 1 6 bytesfrom the beginning of the read 
2048-byte data of the first block, and performs a key 
generation process by applying an encryption process, 
e.g., an AES encryption process, based on a CPS unit 
key on the acquired 1 6 bytes as a seed, thereby gener- 



ating a block key Kb. The CPS unit key applied here is 
a CPS unit key corresponding to a contents manage- 
ment unit (CPS unit) that is associated with the contents 
control information file (CCI file) that is selected. 

5 [0393] In step S203, the information processing ap- 
paratus applies the generated block key Kb to perform 
a decryption process on the block- encrypted data area 
of the read 2048-byte data of the first block exclusive of 
the 16 bytes at the beginning. For example, the infor- 

10 mation processing apparatus performs a decryption 
process according to an AES encryption algorithm. 
[0394] In step S204, the information processing ap- 
paratus determines whether all the block data of the 
contents control information file (CCI file) have been 

15 read and decrypted or not. If not. control goes back to 
step S201 , and the information processing apparatus 
repeats the same process on a succeeding block, i.e., 
acquires a seed, generates a block key Kb, and decrypts 
the encrypted data. 

20 [0395] If all the block data of the contents control in- 
formation file (CCI file) have been read and decrypted, 
then control goes to step S205. 

[0396] In step S205, the information processing ap- 
paratus calculates a hash value X based on all the block 
25 data of the decrypted contents control information file 
(CCI file), exclusive of the overall hash value of 20 bytes. 
At this time, SHA-1 , for example, is applied as a hash 
value calculating algorithm. 

[0397] In step S206, the information processing ap- 
30 paratus compares the calculated hash value with the 
overall hash value read from the contents control infor- 
mation file (CCI file). 

[0398] If the calculated hash value and the read hash 
value do not agree with each other, then control goes to 
35 step S208 in which the information processing appara- 
tus determines that there is falsification, and stops using 
contents according to contents control information. 
[0399] If the calculated hash value and the read hash 
value agree with each other, then control goes to step 
40 S207 in which the information processing apparatus de- 
termines that there is no falsification, and acquires con- 
tents control information and uses contents according 
to the contents control information. In this case, the con- 
trol information comprises basic control information and 
45 extended control information, and the information 
processing apparatus performs a contents usage proc- 
ess according to the basic control information and the 
extended control information. 

50 [1 o. Example of arrangement of information processing 
apparatus] 

[0400] An example of the arrangement of an informa- 
tion processing apparatus for recording and reproduc- 
es jng main contents and subcontents having the above 
contents management units (CPS units). 
[0401] An information processing apparatus 800 has 
a drive 890 for driving an information recording medium 
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891 to input and output data recording and playbacksig- 
nals, a CPU 870 for performing data processing opera- 
tion according to various programs, a ROM 860 as a 
storage area for programs, parameters, etc., a memory 
880, an input/output interface l/F 810 for inputting and 
outputting digital signals, an input/output interface l/F 
840 having an A/D, D/A converter 841 , an MPEG codec 
830 for encoding and decoding MPEG data, a TS/PS 
processing section 820 for performing TS (Transport 
Stream)/PS (Program Stream) processing operation, 
and an encrypting section 850 for performing various 
encryption processes. These blocks are connected to a 
bus 801 . 

[0402] Operation of the information processing appa- 
ratus 800 for recording data will first be described below. 
Data to be recorded are assumed to be of two types, i. 
e., a digital signal and an analog signal. 
[0403] If data to be recorded are in the form of a digital 
signal, it is input from the digital signal input/output in- 
terface l/F 810, and, if necessary, encrypted by the en- 
crypting section 850 into data, which are stored in the 
information recording medium 891. If the data type of 
the input digital signal is to be converted before the dig- 
ital signal is stored, the data type thereof is converted 
into a storage data type by the MPEG codec 830, the 
CPU 870, and the TS/PS processing section 820. The 
data in the converted data type are encrypted by the en- 
crypting section 850 and stored in the information re- 
cording medium 891 . 

[0404] If data to be recorded are in the form of an an- 
alog signal, it is input to the input/output interface l/F 
840, and converted into a digital signal by the A/D con- 
verter 841 . The digital signal is converted by the MPEG 
codec 830 into a digital signal to be recorded. The digital 
signal is then converted by the TS/PS processing sec- 
tion 820 into AV multiplex data in a recording data type. 
If necessary, the data are encrypted by the encrypting 
section 850 and stored in the information recording me- 
dium 891. 

[0405] For example, if main contents represented by 
stream data including MPEG-TS data are to be record- 
ed, then the main contents are segmentalized into con- 
tents management units (CPS units), and thereafter en- 
crypted by the encrypting section 850 according to an 
encryption process using a unit key. The encrypted data 
are then stored in the information recording medium 891 
by the drive 890. 

[0406] Subcontents are also segmentalized into con- 
tents management units (CPS units) corresponding to 
data groups. The data are thereafter encrypted by the 
encrypting section 850 according to an encryption proc- 
ess using a unit key. The encrypted data are then stored 
in the information recording medium 891 by the drive 
890. 

[0407] The various types of management information 
described above, i.e., 

[the unit arrangement and key management ta- 
ble], [the state management table], and 



[the contents playback and copy control informa- 
tion management table], 

are also generated or updated, and, if necessary, stored 
as falsification verification data or encrypted data in the 

5 information recording medium 891 . 

[0408] Operation of the information processing appa- 
ratus 800 for reproducing data from the information re- 
cording medium will be described below. If AV stream 
data including MPEG-TS data as main contents are to 

10 be reproduced, then when data read from the informa- 
tion recording medium 891 by the driver 890 are identi- 
fied as a contents management unit, a unit key corre- 
sponding to the contents management unit is acquired, 
and the data are decrypted by the encrypting section 

15 850 based on the acquired unit key. The decrypted data 
arethen divided into various data, e.g., video data, audio 
data, subtitle data, etc., by the TS/PS processing sec- 
tion 820. 

[0409] The digital data that are decoded by the MPEG 
20 codec 830 are converted by the D/A converter 841 of 
the input/output interface l/F 840 into an analog signal, 
which is output. If digital data are to be output, then the 
M PEG-TS data decrypted by the encrypting section 850 
are output as digital data through the input/output inter- 
ns face l/F 810 to a digital interface such as an IEEE 1394 
cable, an Ethernet cable, or a wireless LAN. For the in- 
formation processing apparatus 800 to have a network 
connection function, the input/output interface l/F 810 
has a network connection function. If the reproducing 
30 apparatus converts the data into a data type capable of 
being received by an output destination device and out- 
puts the converted data, then the video data, the audio 
data, the subtitle data, etc. separated by the TS/PS 
processing section 820 are converted in rate and codec 
35 processing by the MPEG codec 830. Then, the data are 
multiplexed again into MPEG-TS or MPEG-PS data by 
TS/PS processing section 820, and then output from the 
digital signal input/output interface l/F 810. Alternatively, 
the data may be converted by the CPU 870 into a codec 
40 or multiplex file other than MPEG, and then output from 
the digital signal input/output interface l/F 810. 
[041 0] When subcontents are also identified as a con- 
tents management unit, a unit key corresponding to the 
contents management unit is acquired. The data are 
45 then decrypted by the encrypting section 850 based on 
the acquired unit key, and reproduced. 
[0411] If the various types of management informa- 
tion described above, i.e., 

[the unit arrangement and key management ta- 

50 ble], 

[the state management table], and 
[the contents playback and copy control informa- 
tion management table], 

are stored in the image recording medium 891 , then they 
55 are read from the image recording medium 891 and 
stored in the memory 880. Key information for each con- 
tents management unit (CPS unit) required for playback 
can be acquiredf rom the data stored in the memory 880 . 
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If the management tables and unit keys are not stored 
in the information recording medium, then they may be 
acquired from a networked server according to a prede- 
termined procedure. 

[0412] As described above, contents management 
units (CPS units) are established in association with ar- 
rangement data of main contents and subcontents, and 
one unit key is associated with one contents manage- 
ment unit (CPS unit). The supervisory playback control 
program for performing supervisory control over the re- 
production of contents detects switching between con- 
tents management units (CPS units), and switches be- 
tween keys to be applied depending on the switching 
between contents management units (CPS units). If no 
key has been acquired, the supervisory playback control 
program performs a process of presenting a message 
prompting the user to acquire a key. 
[0413] If contents usage control information, i.e., con- 
tents playback and copy control information, is encrypt- 
ed and established as falsification verification data, then 
for using contents, encrypted contents usage control in- 
formation correspondingto a contents management unit 
stored in the information recording medium is acquired. 
The acquired contents usage control information is de- 
crypted by applying a unit key corresponding to the con- 
tents management unit and then verified for falsification. 
On the condition that no falsification is confirmed, a con- 
tents usage process based on the contents usage con- 
trol information is performed. 

[041 4] If information required by the recording and re- 
producing apparatus is acquired via a network outside 
the recording and reproducing apparatus, then the ac- 
quired data are stored in the memory 880 in the record- 
ing and reproducing apparatus. The data that are stored 
include key information necessary for contents play- 
back, subtitle data to be reproduced in timed relation to 
the reproduction of the contents, audio information, im- 
age data such as still image data, contents management 
information, and usage rules of the reproducing appa- 
ratus which correspond to the contents management in- 
formation. 

[0415] The program for performing the reproducing 
process and the recording process is stored in the ROM 
860. While the program is being executed, the memory 
880 is used as storage and work areas for parameters 
and data. In FIG. 34, the apparatus arrangement capa- 
ble of recording and reproducing data is illustrated. 
However, an apparatus having only a playback function 
and an apparatus having only a recording function may 
be arranged, and embodiments of the present invention 
are also applicable to those apparatus. 
[0416] The processing sequence described above in 
the specification can be executed by hardware, soft- 
ware, or a combination thereof. If the processing se- 
quence is to be executed by software, a program in 
which the processing sequence is recorded may be in- 
stalled in a memory in a computer that is incorporated 
in dedicated hardware, or may be installed in a general- 



purpose computer which can execute various process- 
es, and the installed program may be executed. 
[041 7] For example, the program may be recorded in 
advance in a hard disc or a ROM (Read-Only Memory) 

5 as a recording medium. Alternatively, the program may 
be stored (recorded) temporarily or permanently in a re- 
movable recording medium such as a flexible disc, a 
CD-ROM (Compact Disc Read-Only Memory), an MO 
(Magneto-Optical) disc, a DVD (Digital Versatile Disc), 

10 a magnetic disc, or a semiconductor memory. The re- 
movable recording medium may be provided as so- 
called package software. 

[041 8] The program may be installed from the remov- 
able recording medium into the computer. Alternatively 

15 the program may be transferred in a wireless fashion 
from a downloading site into the computer, or may be 
transferred in a wired fashion from a downloading site 
into the computer via a network such as the Internet. 
The computer may receive the transferred program and 

20 install the program in a built-in recording medium such 
as a hard disc or the like. 

[041 9] The various processes described above in the 
specification may be performed not only in a chronolog- 
ical order described above or but also concurrently or 
25 individually depending on the processing capability of 
the apparatus which performs those processes, or if 
necessary. The system referred to in the present spec- 
ification includes a logical set of plural apparatus, and 
is not limited to one in which the apparatus are housed 
30 in one casing. 

[0420] According to the arrangement of embodiments 
of the present invention, as described above, main con- 
tents having a data format according to a certain AV (Au- 
dio Visual) format such as a Blu-ray disc ROM format, 
35 for example, and subcontents having a data format not 
according to the AV format are established as contents 
management units, and data included in the contents 
management units are stored in an information record- 
ing medium as encrypted data based on individual unit 
40 keys associated with the respective contents manage- 
ment units. Therefore, not only data according to the AV 
format, but also data according to an arbitrary format not 
according to the AV format can be used in various forms. 
The arrangement of embodiments of the present inven- 
45 tion is effectively applicable to an information recording 
medium and an information processing apparatus in a 
system which is required to store a plurality of contents 
in the information recording medium and to perform us- 
age control on each of the contents. 
50 [0421] According to the arrangement of embodiments 
of the present invention , furthermore, arrangement data 
of main contents and subcontents are divided into units, 
and usage control of contents in each of the units, or 
specifically, usage control of various contents, such as 
55 playback control and copy control, can be performed. 
Since contents usage control can be performed individ- 
ually in each of contents management units, each of the 
segmentalized contents can be managed in an informa- 
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tion recording medium which stores many contents. The 
arrangement of embodiments of the present invention 
are effectively applicable to an information recording 
medium and an information processing apparatus in a 
system which is required to store a plurality of contents 
in the information recording medium and to perform us- 
age control on each of the contents. 
[0422] According to the arrangement of embodiments 
of the present invention, furthermore, arrangement data 
of main contents and subcontents are divided into units, 
and usage control information of contents of in each of 
the units is established and encrypted as falsification 
verification data. Consequently, the contents are pre- 
vented from suffering unauthorized usage due to unau- 
thorized acquisition and falsification of usage control in- 
formation. The arrangement of embodiments of the 
present invention are effectively applicable to an infor- 
mation recording medium and an information process- 
ing apparatus in a system which is required to perform 
usage control of contents strictly. 
[0423] According to the arrangement of embodiments 
of the present invention, furthermore, contents usage 
control information corresponding to contents divided 
into contents management units (CPS units) is convert- 
ed into encrypted data using unit keys corresponding to 
the contents management units, and falsification verifi- 
cation data corresponding to data including the contents 
usage control information are established and recorded. 
Therefore, it is possible to prevent the contents usage 
control information from leaking and being falsified, thus 
realizing contents usage management at a higher secu- 
rity level. 

[0424] According to the arrangement of embodiments 
of the present invention, furthermore, contents usage 
control information corresponding to contents divided 
into contents management units (CPS units) is divided 
into basic control information and extended control in- 
formation, and certain block data including the basic 
control information are established. Each block is en- 
crypted, and falsification verification data corresponding 
to the block data including the basic control information 
are established. Therefore, an apparatus for using con- 
tents according to only the basic control information is 
not required to decode data block storing the extended 
control information and verify those data block storing 
the extended control information forfalsif ication, but can 
process data efficiently. 

[0425] In so far as the embodiments of the invention 
described above are implemented, at least in part, using 
software-controlled data processing apparatus, it will be 
appreciated that a computer program providing such 
software control and a storage medium by which such 
a computer program is stored are envisaged as aspects 
of the present invention. 

[0426] Although particular embodiments have been 
described herein, it will be appreciated that the invention 
is not limited thereto and that many modifications and 
additions thereto may be made within the scope of the 



invention. For example, various combinations of the fea- 
tures of the following dependent claims can be made 
with the features of the independent claims without de- 
parting from the scope of the present invention. 

5 

Claims 

1. An information recording medium, storing: 

10 

main contents having constituent data accord- 
ing to a predetermined format and subcontents 
having constituent data not according to the 
predetermined format, as recorded data; 
15 said main contents and said subcontents hav- 

ing constituent data established as contents 
management units; 

the contents management units including data 
stored as encrypted data based on individual 
20 unit keys associated respectively with said con- 

tents management units. 

2. The information recording medium according to 
claim 1 , wherein said predetermined format is a Blu- 

25 ray disc ROM format, and said main contents com- 
prise recorded data having a layered data arrange- 
ment according to said Blu-ray disc ROM format. 

3. The information recording medium according to 
30 claim 1, wherein said subcontents comprise a set 

of data groups including at least one data file, said 
contents management units being established as 
units of said data groups, said information recording 
medium storing path identification information of the 
35 files of the data groups corresponding to the con- 
tents management units, as data group manage- 
ment information. 

4. The information recording medium according to 
40 claim 1 , wherein said subcontents comprise a set 

of data groups including at least one data file, said 
contents management units being established as 
units of said data groups, said information recording 
medium having a directory arrangement with said 
45 data groups established as individual folders. 

5. The information recording medium according to 
claim 4, wherein said information recording medium 
stores identification information of the individual 

50 folders of the data groups corresponding to the con- 
tents management units, as the data group man- 
agement information. 

6. The information recording medium according to 
55 claim 1 , wherein said information recording medium 

stores contents usage control information corre- 
sponding to the contents management units, as the 
encrypted data based on the unit keys associated 
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respectively with the contents management units. 

7. The information recording medium according to 
claim 1 , wherein said information recording medium 
stores contents usage control information corre- 5 
sponding to the contents management units, as da- 
ta having a falsification prevention arrangement. 

8. The information recording medium according to 
claim 1 , wherein said information recording medium 10 
stores contents usage control information corre- 
sponding to the contents management units and 
data associated with hash values based on the con- 
tents usage control information, as the encrypted 
data based on the unit keys associated respectively is 
with the contents management units. 

9. The information recording medium according to 
claim 1 , wherein said information recording medium 
stores repetitive data of contents usage control in- 20 
formation corresponding to the contents manage- 
ment units, as the encrypted data based on the unit 
keys associated respectively with the contents 
management units. 

25 

10. The information recording medium according to 
claim 1 , wherein said information recording medium 
stores first playback contents as contents repro- 
duced when the information recording medium is 
loaded in a drive, said first playback contents being 30 
established as contents management units, the 
contents management units including data stored 

as the encrypted data based on the individual unit 
keys associated respectively with the contents 
management units. 35 

11. The information recording medium according to 
claim 1 , wherein said information recording medium 
stores top menu contents as contents reproduced 
when a menu display function is performed, said top 40 
menu contents being established as contents man- 
agement units, the contents management units in- 
cluding data stored as the encrypted data based on 

the individual unit keys associated respectively with 
the contents management units. 45 

12. The information recording medium according to 
claim 1 , wherein said information recording medium 
further stores a data file defining information repre- 
sentative of association between the contents man- 50 
agement units and indexes, and random number in- 
formation for generating the unit keys. 

13. An information processing apparatus, comprising: 

55 

a management unit setting section for estab- 
lishing constituent data of main contents ac- 
cording to a predetermined format and subcon- 



tents not according to the predetermined for- 
mat, as contents management units; and 
a recording section for recording data included 
in the contents management units in an infor- 
mation recording medium as encrypted data 
based on individual unit keys associated re- 
spectively with said contents management 
units. 

14. The information processing apparatus according to 
claim 13, wherein said predetermined format is a 
Blu-ray disc ROM format, and said recording sec- 
tion stores said main contents in said information 
recording medium as recorded data having a lay- 
ered data arrangement according to said Blu-ray 
disc ROM format. 

15. The information processing apparatus according to 
claim 13, wherein said management unit setting 
section establishes said contents management 
units in association with a set of data groups includ- 
ing at least one data file included in said subcon- 
tents, and said recording section records path iden- 
tification information of the files of the data groups 
corresponding to the contents management units, 
in said information recording medium as data group 
management information. 

16. The information processing apparatus according to 
claim 13, wherein said management unit setting 
section establishes said contents management 
units in association with a set of data groups includ- 
ing at least one data file included in said subcon- 
tents, and said recording section records said at 
least one data file included in said subcontents in 
said information recording medium based on a di- 
rectory arrangement with said data groups estab- 
lished as individual folders. 

17. The information processing apparatus according to 
claim 16, wherein said recording section records 
identification information of the individual folders of 
the data groups corresponding to the contents man- 
agement units, in said information recording medi- 
um as the data group management information. 

18. The information processing apparatus according to 
claim 13, wherein said recording section records 
contents usage control information corresponding 
to the contents management units ; in said informa- 
tion recording medium as the encrypted data based 
on the unit keys associated respectively with the 
contents management units. 

19. The information processing apparatus according to 
claim 13, wherein said recording section records 
contents usage control information corresponding 
to the contents management units, in said informa- 
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tion recording medium as data having a falsification 
prevention arrangement. 

20. The information processing apparatus according to 
claim 13, wherein said recording section encrypts 
contents usage control information corresponding 
to the contents management units and data asso- 
ciated with hash values based on the contents us- 
age control information, based on the unit keys as- 
sociated respectively with the contents manage- 
ment units, and records the encrypted contents us- 
age control information and the encrypted data in 
said information recording medium. 

21 . The information processing apparatus according to 
claim 13, wherein said recording section encrypts 
repetitive data of contents usage control informa- 
tion corresponding to the contents management 
units, based on the unit keys associated respective- 
ly with the contents management units, and records 
the encrypted repetitive data in said information re- 
cording medium. 

22. The information processing apparatus according to 
claim 13, wherein said management unit setting 
section establishes first playback contents as con- 
tents reproduced when the information recording 
medium is loaded in a drive, as contents manage- 
ment units, and said recording section records data 
included in the contents management units as the 
encrypted data based on the individual unit keys as- 
sociated respectively with the contents manage- 
ment units. 

23. The information processing apparatus according to 
claim 13, wherein said management unit setting 
section establishes top menu contents as contents 
reproduced when a menu display function is per- 
formed, as contents management units, and said 
recording section records data included in the con- 
tents management units as the encrypted data 
based on the individual unit keys associated re- 
spectively with the contents management units. 

24. The information processing apparatus according to 
claim 13, wherein said recording section further 
records a data file defining information representa- 
tive of association between the contents manage- 
ment units and indexes, and random number infor- 
mation for generating the unit keys. 

25. An information processing apparatus for reproduc- 
ing usage management contents, comprising: 

an acquiring section for acquiring encrypted 
contents usage control information corre- 
sponding to contents management units stored 
in an information recording medium; and 



a decrypting and verifying section for decrypt- 
ing and verifying, for falsification, the contents 
by applying unit keys established in association 
with the contents management units, and using 
5 the contents based on the contents usage con- 

trol information if no falsification is confirmed. 

26. An information processing method, comprising the 
steps of: 

10 

establishing constituent data of main contents 
according to a predetermined format and sub- 
contents having not according to the predeter- 
mined format, as contents management units; 
is and 

storing data included in the contents manage- 
ment units in an information recording medium 
as encrypted data based on individual unit keys 
associated respectively with said contents 
20 management units. 

27. The information processing method according to 
claim 26, wherein said predetermined format is a 
Blu-ray disc ROM format, and said data storing step 

25 comprising the step of storing said main contents in 
said information recording medium as recorded da- 
ta having a layered data arrangement according to 
said Blu-ray disc ROM format. 

30 28. The information processing method according to 
claim 26, further comprising the steps of: 

establishing said contents management units 
in association with a set of data groups includ- 
es ing at least one data file included in said sub- 
contents; and 

storing path identification information of the 
files of the data groups corresponding to the 
contents management units, in said information 
40 recording medium as data group management 

information. 

29. The information processing method according to 
claim 26, further comprising the steps of: 

45 

establishing said contents management units 
in association with a set of data groups includ- 
ing at least one data file included in said sub- 
contents; and 

50 storing said at least one data file included in 

said subcontents in said information recording 
medium based on a directory arrangement with 
said data groups established as individual fold- 
ers. 

55 

30. The information processing method according to 
claim 29, further comprising the step of: 
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storing identification information of the individ- 
ual folders of the data groups corresponding to 
the contents management units, in said infor- 
mation recording medium as the data group 
management information. 

31. The information processing method according to 
claim 26, further comprising the step of: 

storing contents usage control information cor- 
responding to the contents management units, 
in said information recording medium as the en- 
crypted data based on the unit keys associated 
respectively with the contents management 
units. 



with the contents management units. 

36. The information processing method according to 
claim 26, further comprising the steps of: 

5 

establishing top menu contents as contents re- 
produced when a menu display function is per- 
formed, as contents management units; and 
storing data included in the contents manage- 
10 ment units as the encrypted data based on the 

individual unit keys associated respectively 
with the contents management units. 

37. The information processing method according to 
15 claim 26, further comprising the step of: 



32. The information processing method according to 
claim 26, further comprising the step of: 

storing contents usage control information cor- 20 
responding to the contents management units, 
in said information recording medium as data 
having a falsification prevention arrangement. 

33. The information processing method according to 25 
claim 26, further comprising the steps of: 

encrypt contents usage control information cor- 
responding to the contents management units 
and data associated with hash values based on 30 
the contents usage control information, based 
on the unit keys associated respectively with 
the contents management units; and 
storing the encrypted contents usagecontrol in- 
formation and the encrypted data in said infor- 35 
mation recording medium. 

34. The information processing method according to 
claim 26, further comprising the steps of: 

40 

encrypting repetitive data of contents usage 
control information corresponding to the con- 
tents management units, based on the unit 
keys associated respectively with the contents 
management units; and 45 
storing the encrypted repetitive data in said in- 
formation recording medium. 

35. The information processing method according to 
claim 26, further comprising the steps of: 50 



further storing a data file defining information 
representative of association between the con- 
tents management units and indexes, and ran- 
dom number information for generating the unit 
keys. 

38. An information processing method of reproducing 
usage management contents, comprising the steps 
of: 

acquiring encrypted contents usage control in- 
formation corresponding to contents manage- 
ment units stored in an information recording 
medium; 

decrypting and verifying, for falsification, the 
contents by applying unit keys established in 
association with the contents management 
units; and 

using the contents based on the contents us- 
age control information if no falsification is con- 
firmed. 

39. A computer program for recording usage manage- 
ment contents, comprising the steps of: 

establishing constituent data of main contents 
according to a predetermined format and sub- 
contents not according to the predetermined 
format, as contents management units; and 
storing data included in the contents manage- 
ment units in an information recording medium 
as encrypted data based on individual unit keys 
associated respectively with said contents 
management units. 

40. A computer program for reproducing usage man- 
agement contents, comprising the steps of: 

acquiring encrypted contents usage control in- 
formation corresponding to contents manage- 
ment units stored in an information recording 
medium; and 



establishing first playback contents as contents 
reproduced when the information recording 
medium is loaded in a drive, as contents man- 
agement units; and 55 
storing data included in the contents manage- 
ment units as the encrypted data based on the 
individual unit keys associated respectively 
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decrypting and verifying, for falsification, the 
contents by applying unit keys established in 
association with contents management units; 
and 

using the contents based on the encrypted con- 5 
tents usage control information corresponding 
if no falsification is confirmed. 

41. An information recording medium storing: 

10 

at least onecontents divided into contents man- 
agement units and containing encrypted data 
based on unit keys established respectively in 
association with the contents management 
units; and 15 
contents usage control information established 
respectively in association with the contents 
management units; 

said contents usage control information being 
stored as encrypted data according to an en- 20 
cryption process applying the unit keys estab- 
lished respectively in association with the con- 
tents management units, with falsification veri- 
fication data added thereto. 

25 

42. The information recording medium according to 
claim 41 , wherein said contents usage control infor- 
mation is encrypted in blocks each having a prede- 
termined amount of data, and stored as block seeds 
comprising data of the respective blocks and en- 30 
crypted block data encrypted based on a block key 
generated by an encryption process applying said 
unit keys. 

43. The information recording medium according to 35 
claim 42, wherein said block seeds comprise block 
data which do not serve as the contents usage con- 
trol information. 

44. The information recording medium according to 40 
claim 42, wherein said contents usage control infor- 
mation comprises data including control information 

in different categories representing basic control in- 
formation and extended control information, said 
basic control information being stored in one block, 45 
with falsification verification data for data of the 
block storing said basic control information being 
stored in the same block. 

45. The information recording medium according to 50 
claim 42, wherein said contents usage control infor- 
mation comprises data including control information 

in different categories representing basic control in- 
formation and extended control information, said 
basic control information being stored in one block, 55 
with first falsification verification data for data of the 
block storing said basic control information being 
stored in the same block, said information recording 



medium storing second falsification verification da- 
ta for all data of said basic control information and 
said extended control information. 

46. An information processing apparatus for reproduc- 
ing usage management contents, comprising: 

an acquiring section for acquiring contents us- 
age control information corresponding to con- 
tents management units stored in an informa- 
tion recording medium; 

a decrypting section for decrypting blocks of 
block data each having a predetermined 
amount of data and serving as said contents us- 
age control information by applying unit keys 
established in association with the contents 
management units, and verifying, for falsifica- 
tion, the blocks based on falsification verifica- 
tion data included in the block data; and 
a using section for using the contents based on 
the decrypted contents usage control informa- 
tion if no falsification is confirmed. 

47. The information processing apparatus according to 
claim 46, wherein said acquiring section acquires 
block seeds from the blocks of said contents usage 
control information, and said decrypting section de- 
crypts the blocks based on a block key generated 
by an encryption process applying said block seeds 
and said unit keys. 

48. The information processing apparatus according to 
claim 46, further comprising a selection section for 
selecting only one block data including basic control 
information from a plurality of blockdata of said con- 
tents usage control information, wherein said de- 
crypting section decrypts the selected block data in- 
cluding the basic control information, and verifies, 
for falsification , the block data based on falsification 
verification data included in the block data, and said 
using section uses the contents based on the de- 
crypted contents usage control information if no fal- 
sification is confirmed. 

49. The information processing apparatus according to 
claim 46, further comprising a selecting section for 
selecting a plurality of block data including basic 
control information and extended control informa- 
tion from a plurality of block data of said contents 
usage control information, wherein said decrypting 
section decrypts blocks of the selected block data, 
and verifies, for falsification, the block data based 
on falsification verification data ; and said using sec- 
tion uses the contents based on the decrypted con- 
tents usage control information if no falsification is 
confirmed. 

50. An information processing apparatus for recording 
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usage management contents in an information re- 
cording medium, comprising: 

a generating section for generating falsification 
verification data for contents usage control in- 5 
formation corresponding to contents manage- 
ment units established for individual usage 
management control; 

an encrypting section for encrypting the con- 
tents by applying unit keys established respec- 10 
tively in association with said contents manage- 
ment units to generate encrypted data; and 
a generating and recording section for gener- 
ating and recording encrypted contents usage 
control information including said falsification 15 
verification data. 



51 . The information processing apparatus according to 
claim 50, further comprising: 

a dividing section for dividing said contents us- 
age control information into blocks each having 
a predetermined amount data; 
a generating section for generating a block key 
according to an encryption process applying 
block seeds extracted from constituent data of 
said blocks and said unit keys, and generating 
encrypted block data based on said block key; 
and 

a recording section for recording the encrypted 
block data in the information recording medium. 

52. The information processing apparatus according to 
claim 51 , further comprising: 

an extracting section for extracting said block 
seeds from block constituent data which do not 
serve as the contents usage control informa- 
tion. 

53. The information processing apparatus according to 
claim 51 , further comprising: 

a dividing section for dividing said contents us- 
age control information in different categories 
representing basic control information and ex- 
tended control information; 
a storing section for storing said basic control 
information in one block; 
a generating section for generating falsification 
verification data for data of the block storing 
said basic control information; 
a recording section for recording the falsifica- 
tion verification data in said same block. 

54. The information processing apparatus according to 
claim 51 , further comprising: 



a dividing section for dividing said contents us- 
age control information in different categories 
representing basic control information and ex- 
tended control information; 
a storing section for storing said basic control 
information in one block; 
a generating section for generating first falsifi- 
cation verification data for data of the block 
storing said basic control information; 
a recording section for recording the first falsi- 
fication verification data in said same block; 
a generating section for generating second fal- 
sification verification data for all data of said ba- 
sic control information and said extended con- 
trol information; and 

a recording section for recording the second fal- 
sification verification data. 

55. An information processing method of reproducing 
20 usage management contents, comprising the steps 

of: 

acquiring contents usage control information 
corresponding to contents management units 
25 stored in an information recording medium; 

decrypting blocks of block data each having a 
predetermined amount of data and serving as 
said contents usage control information by ap- 
plying unit keys established in association with 
30 the contents management units; 

verifying, for falsification, the blocks based on 
falsification verification data included in the 
block data; and 

using the contents based on the decrypted con- 
35 tents usage control information if no falsifica- 

tion is confirmed. 

56. The information processing method according to 
claim 55, wherein said decrypting step comprises 

40 the steps of: 

acquiring block seeds from the blocks of said 
contents usage control information, and de- 
crypting the blocks based on a block key gen- 
45 erated by an encryption process applying said 

block seeds and said unit keys. 

57. The information processing method according to 
claim 55, further comprising the steps of: 

50 

selecting only one block data including basic 
control information from a plurality of block data 
of said contents usage control information; 
decrypting the selected block data including the 
55 basic control information; 

verifying, for falsification, the block data based 
on falsification verification data included in the 
block data; and 
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using the contents based on the decrypted con- 
tents usage control information if no falsifica- 
tion is confirmed. 

58. The information processing method according to 5 
claim 55, further comprising the steps of: 



mation, storing said basic control information in 
one block, generate falsification verification da- 
ta for data of the block storing said basic control 
information, storing the falsification verification 
data in said same block, and recording the fal- 
sification verification. 



selecting a plurality of block data including ba- 
sic control information and extended control in- 
formation from a plurality of block data of said 
contents usage control information; 
decrypting blocks of the selected block data; 
verifying, for falsification, the block data based 
on falsification verification data; and 
using the contents based on the decrypted con- 
tents usage control information if no falsifica- 
tion is confirmed. 

59. An information processing method of recording us- 
age management contents in an information re- 
cording medium, comprising the steps of: 

generating falsification verification data for con- 
tents usage control information corresponding 
to contents management units established for 
individual usage management control; 
encrypting the contents by applying unit keys 
established respectively in association with 
said contents management units to generate 
encrypted data; and 

generating and recording encrypted contents 
usage control information including said falsifi- 
cation verification data. 

60. The information processing method according to 
claim 59, further comprising the steps of: 

dividing said contents usage control informa- 
tion into blocks each having a predetermined 
amount data, generating a block key according 
to an encryption process applying block seeds 
extracted from constituent data of said blocks 
and said unit keys, generating encrypted block 
data based on said block key, and recording the 
encrypted block data in the information record- 
ing medium. 

61. The information processing method according to 
claim 60, wherein said block seeds are extracted 
from block constituent data which do not serve as 
the contents usage control information. 

62. The information processing method according to 
claim 60, further comprising the steps of: 

dividing said contents usage control informa- 
tion in different categories representing basic 
control information and extended control infor- 



63. The information processing method according to 
claim 60, further comprising the steps of: 

10 

dividing said contents usage control informa- 
tion in different categories representing basic 
control information and extended control infor- 
mation, storing said basic control information in 

15 one block, generate first falsification verifica- 

tion data for data of the block storing said basic 
control information, storing the first falsification 
verification data in said same block, and record- 
ing the falsification verification; and 

20 generating second falsification verification data 

for all data of said basic control information and 
said extended control information, and record 
the second falsification verification data. 

25 64. A computer program for reproducing usage man- 
agement contents, comprising the steps of: 

acquiring contents usage control information 
corresponding to contents management units 
30 stored in an information recording medium; 

decrypting blocks of block data each having a 
predetermined amount of data and serving as 
said contents usage control information by ap- 
plying unit keys established in association with 
35 the contents management units; 

verifying, for falsification, the blocks based on 
falsification verification data included in the 
block data; and 

using the contents based on the decrypted con- 
40 tents usage control information if no falsifica- 

tion is confirmed. 

65. A computer program for recording usage manage- 
ment contents in an information recording medium, 
45 comprising the steps of: 

generating falsification verification data for con- 
tents usage control information corresponding 
to contents management units established for 
50 individual usage management control; 

encrypting the contents by applying unit keys 
established respectively in association with 
said contents management units to generate 
encrypted data; and 
55 generating and recording encrypted contents 

usage control information including said falsifi- 
cation verification data. 
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(root)/- 



] BDMV 

%T: MANAGEMENT TABLE a [CPS JJn i t_Key. tbl] 
-?S MANAGEMENT TABLE b [CPS_Unit_CCI. tbl] 



512 



jndex. bdmv — TITLE (INDEX TABLE) 
-4h MovieObject. bdmv — PLAYBACK PROGRAM 
-C PLAY LIST 
4}. 1 1 1 11 . mp I si 
#22222. mp Is [-PLAY LIST 
4z 99999. mp I s 



-OCLIPINF 

iu: 01000. dpi] 
iU: 02000. clpij 

■ 

-D STREAM 

# 01000. m2ts] 
i?: 02000. m2ts 



-lu: DataGroup. inf 
~Q DATA 



h?S MANAGEMENT TABLE c 
[CPS_Unit_Key. tbl] 

H»- MANAGEMENT TABLE d 
[CPS_Unit_CCI.tbl] 

4*. Fi lei. dat 
-iU: F i Ie2. dat 

— lU: F i I eA. dat 
iU: F i I eB. dat 

SUBCONTENTS j 



CLIP INFORMATION 



CLIP AV STREAM 

MAIN CONTENTS 



511 



514 



513 



DATA GROUP 
INFORMATION 

DATA GROUP 1 



/DATA/Fi Ie1.dat 
/DATA/Fi Ie2. dat 



DATA GROUP N 



/DATA/Fi I eA. dat 
/DATA/Fi I B1. dat 
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(root^ 



F I G. 1 4 



- Tl BDMV 

H$ MANAGEMENT TABLE a [CPSJJn i t_Key. tbl] 
£ MANAGEMENT TABLE b [CPSJJn i t_CC I. tbl] 



index, bdmv - TITLE (INDEX TABLE) 
iU: MovieObject. bdmv - PLAYBACK PROGRAM 
hO PLAY LIST 



512 



4h 1 1 1 1 1 . mp I s 
-iU; 22222. mp I s 
4x 99999. mp I s 



-DCLIPINF 

lU: 01000. dpi] 
iU: 02000. dpij 

-C] STREAM 

-•Jj: 01000. m2ts] 
-# 02000. m2ts| 



PLAY LIST 



-511 



CLIP INFORMATION 



CLIP AV STREAM 

MAIN CONTENTS 



j\ DataGroup. inf 

~f^~l DATA 

-^MANAGEMENT TABLE c 
[CPSJJn it_Key. tbl] 

Ha MANAGEMENT TABLE d 
[CPS_Unit_CCI.tbl] 

-DDATA1 

( C 3 
IT„ S I 

iU:Fi Ie2.dat 

-ODATA2 
-4): F i I eA. dat 
-lU: F i leB. dat 

t SUBCONTENTS 



514 



521 



DATA GROUP INFORMATION 



[DATA GROUP] 


[DIRECTORY] 


DATA GROUP 1 


/DATAV 


DATA GROUP 2 


/DATA2/ 
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4)j MANAGEMENT TABLE a [CPSJJnitJCey. tblll 
-V? MANAGEMENT TABLE b [CPS_Unit_CCI. tbl] J 



BDMV 



i ndex. bdmv 
-4h Mov i eOb j ect. bdmv 
-DPLAYLIST 
-DCLIPINF 
-Q STREAM 



551 



MAIN CONTENTS 



-lU: DataGroup. inf 

~CH DATA 

4h Fi lei. dat 
4)\F\ Ie2.dat 

i)J:Fi leA. dat 
4h F i I eB. dat 
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SUBCONTENTS 
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[ Root I 



BDCPS 



Un i t_Key_Gen_Va I Lie, inf 



609 



610 CPSUnitOOI. 



cc I 



CPSUnit002. cci 



-j PLAYBACK/COPY CONTROL 
INFORMATION FOR EACH 
i CPS UNIT 

i 



BDMV | 



— [P 



index, bdmv 



} 



MovieObiect. bdmv I } MOV IE OBJECT 



.AYL I ST 



- 00001. mp Is 



00002. mp I s 



PLAY LIST FILE 



— { CLIPINF" 



01001. dpi 



H01002. dpi 



CLIP INFORMATION FILE 



L — ( stream"! 



01001. m2ts--613 



01002. m2tsK 614 
02001. m2tsK 615 



CLIP AV STREAM 
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EXAMPLE OF STRUCTURE OF Unit_Key_Generation_Value. inf : SYNTAX DIAGRAM 



FIELD NAME NUM_OF_BITS 
Unit_Key_Genertion_Value. inf { 

CPSJJn i t_number_f or_F i rstP I ayback 16 

CPSJJn it jiumber_for_TopMenu 16 

Number of Titles 16 
for ( i=1 ; i <Num_of_T i 1 1 es+1 ; i ++) { 

CPS_Unit_number fo Title #i 16 

} 

Number of CPS Jin its 16 



for ( i =1 ; i <Num_of_CPS_Un i t+1 ; i++) { 

Unit Key Generation Value for CPSJJn it #i 128 

} 

J 

iTf First Playback IS NOT PRESENT IN AV CONTENTS, THEN 
j SET CPS_Un i t_number_f or_F i rstP I ayback = 0. 

! - IF Top Menu IS NOT PRESENT IN AV CONTENTS, THEN 
J SET CPS_Unit_number_for_Top Menu = 0. 

i-Title#1 - Title#[Number_of_Titles] DEFINES CORRESPONDING 
i CPS_Unit NUMBER WITH ABOVE Syntax. 
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622 
BLOCK SEED 
(16 BYTES) 



USER DATA = 2048 BYTES 



ENCRYPTED DATA (2032 BYTES, 
ENCRYPTED WITH BLOCK KEY Kb) 



0^ 



623 



UNIT KEY: Kua 



S11 



AES G 



V 



3 



624 

BLOCK KEY Kb 



S12 



AESJE 



A 



r 



r 



622 
BLOCK SEED 
(16 BYTES) 



2048 BYTES 





















i 625 ENCRYPTED DATA 
i (2032 BYTES) 




5* 



621 
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632 
BLOCK SEED 
(16 BYTES) 



USER DATA = 2048 BYTES 



634 » 

UNIT KEY: Kua 



S21 



AES_G 



I 



ENCRYPTED DATA (2032 BYTES, 
ENCRYPTED WITH BLOCK KEY Kb) 



3 



635 

BLOCK KEY Kb 



v S22 



AES D 



632 
BLOCK SEED 
(16 BYTES) 



DECRYPTED DATA (2032 BYTES) 



633 



631 



636 



CONTENT USAGE CONTROL INFORMATION 



2048 BYTES 
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-721 
J>2048 Bytes 



FIELD NAME NUM_OF_BITS 
CPSUnitX. cci { 

Number_of_Pr i mar y_CCI_l oops 16 

Reserved 112 
for (l=0; l<Number_of_Primary_CCI_loops; I++) { 

CCI_and_other_info_type 16 

CCI_and_other_info_data_length (=N) 16 

CCI_and_other_info_data N*8 

} 

Reserved X 

Hash_va I ue_f or_Pr i mary_CC I 160. 

Number_of_Secondary_CCI_loops 16 

Reserved 112 
for 0=0; l<Number_of_Secondary_CCIjoops; |++) { 

CCI_and_other_info_type 16 

CCI_and_other_info_data_length (=M) 16 

CCI_and_other_info_data M*8 

} 

Reserved Y 

Hash value_for_AII CCI 160 



— 722 

(2048*N) Bytes 
>: OPTION 
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FIELD NAME 



NUM_OF_BITS 



Number_of _Bas i c_CC I _ i oops 1 6 

Reserved 112 
f or ( I =0 ; I <Number_of _Bas i c_CC I _ I oops ; I ++) { 

CCI_and_other_info_type 16 

CCI_and_other_info_data_length (=N) 16 

CCI_and_other_info_data N*8 

} 

Reserved X 

Hash_value_for_Basic_CCI 160, 

Number_of_Extended_CCI_loops 16 

Reserved 112 
f or ( I =0 ; I <Number_of_Extended_CC I _ I oops ; I ++) { 

CCI_and_other_info_type 16 

CCI_and_other_info_data_length (=M) 16 

CCI_and_other_info_data M*8 

} 

Reserved Y 

Hash value for All CCI 160 
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^2048 Bytes 



— 772 

(2048*N) Bytes 
>•: OPTION 
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c 



START J 



S201 



READ 2048 BYTES OF CCI FILE 



S202 



GENERATE BLOCK KEY Kb, USING 16 BYTES AT 
START OF 2048 BYTES AS SEED 



S203 



DECRYPT 2032 BYTES (BYTE 16 THROUGH BYTE 
2047) FOLLOWING SEED, USING Kb, AND SAVE 
2048 BYTES OF PLAINTEXT IN MEMORY 




CCI FILE READ TO ITS END 
AND DECRIPTION FINISHED? 




S204 





, S205 


CALCULATE HASH VALUE X BASED ON DATA FROM 
START OF CCI FILE UP TO IMMEDI ATELLY PRIOR 
TO OVERALL HASH VALUE 


\ 


! . 



S208 



ACQUISITION OF CCI 
INFORMATION IS 
UNSUCCESSFUL 
(CONTENTS PLAYBACK/ 
COPY NOT POSSIBLE) 



OVERALL HASH VALUE IN 
CONFORMITY WITH EACH OTHER?. 



,YES 



S207 



ACQUISITION OF NECESSARY CCI 
INFORMATION IS SUCCESSFUL 
(PERFORM PLAYBACK/COPY 
CONTROL ACCORDING TO CCI) 



c 



END 
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